fcd7b88918f3576ddf5e6ca413fe96daf08a525146d0ce8a994537fb5c0ce3b70422887599cedc8ad62e0d7b870134386222ff72b1b767f189f1e3748a70881b7cde1bab6fb4301b940afb102d3a7f8a7b68a14eebb928a0e80180419dda562cafa1947de6cc3174794ceb8e9957c007cd8ac08a830352165edfb913e926a3e18c10dbb95334101466b8db8d83af0c490a067f1a070009a8940d767ddc62d661e4"}) 14:20:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xc, 0x0, r4) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r6, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r5, &(0x7f0000000180)="43d351a1ba1fdfbe4c38e8896c579b0d40afa890186876108fbe34f3f704c02d5f5836b8f4df1d6d7aa0ee68e0b57bbbd51d922f0f925aac000000000000000c0000000000", 0x45, 0x800000}]) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r5, 0x0) syz_io_uring_submit(r7, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r2, 0x80, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0xffff) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd=r0, 0x9, &(0x7f0000000040), 0x0, 0x0, 0x0, {0x0, r4}}, 0xa43) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x225a, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r9, r8, 0x0, 0xf88c) io_uring_enter(r3, 0x4b96, 0x2eb8, 0x1, &(0x7f0000000040)={[0x200]}, 0x8) 14:20:34 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000300)={0xffffff7f, 0x0, 0x9, &(0x7f0000000200)="4ee327a473f665be59"}) openat(0xffffffffffffff9c, &(0x7f0000006440)='./file0\x00', 0x8000, 0xd0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/245, 0xf5}, {&(0x7f0000001480)=""/102, 0x66}], 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) 14:20:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x6a6720820f96ba77) unshare(0x48020200) creat(&(0x7f0000000000)='./file0\x00', 0x1fe) 14:20:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xf0ffffff, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:20:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2395.521535] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2395.526900] FAULT_INJECTION: forcing a failure. [ 2395.526900] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.529334] CPU: 0 PID: 18533 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2395.530886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.532675] Call Trace: [ 2395.533257] dump_stack+0x107/0x167 [ 2395.534071] should_fail.cold+0x5/0xa [ 2395.534886] ? create_object.isra.0+0x3a/0xa20 [ 2395.535880] should_failslab+0x5/0x20 [ 2395.536703] kmem_cache_alloc+0x5b/0x310 [ 2395.537596] create_object.isra.0+0x3a/0xa20 [ 2395.538554] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2395.539649] kmem_cache_alloc_trace+0x151/0x320 [ 2395.540686] ip_setup_cork+0x6ea/0x930 [ 2395.541532] ? raw_destroy+0x30/0x30 [ 2395.542371] ip_append_data+0x167/0x1a0 [ 2395.543240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.544396] raw_sendmsg+0xaa6/0x29d0 [ 2395.545241] ? dst_output+0x170/0x170 [ 2395.546093] ? __lock_acquire+0x1657/0x5b00 [ 2395.547045] ? perf_trace_lock+0xac/0x490 [ 2395.547939] ? SOFTIRQ_verbose+0x10/0x10 [ 2395.548816] ? create_object.isra.0+0x3ad/0xa20 [ 2395.549832] ? __lockdep_reset_lock+0x180/0x180 [ 2395.550861] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2395.551964] ? find_held_lock+0x2c/0x110 [ 2395.552879] ? trace_hardirqs_on+0x5b/0x180 [ 2395.553830] ? dst_output+0x170/0x170 [ 2395.554663] inet_sendmsg+0x11d/0x140 [ 2395.555486] ? inet_send_prepare+0x540/0x540 [ 2395.556430] __sock_sendmsg+0x13c/0x190 [ 2395.557298] ____sys_sendmsg+0x334/0x870 [ 2395.558185] ? sock_write_iter+0x3d0/0x3d0 [ 2395.559102] ? do_recvmmsg+0x6d0/0x6d0 [ 2395.559951] ? perf_trace_lock+0xac/0x490 [ 2395.560847] ? __lockdep_reset_lock+0x180/0x180 [ 2395.561868] ? perf_trace_lock+0xac/0x490 [ 2395.562770] ___sys_sendmsg+0xf3/0x170 [ 2395.563614] ? sendmsg_copy_msghdr+0x160/0x160 [ 2395.564605] ? lock_downgrade+0x6d0/0x6d0 [ 2395.565530] ? lock_downgrade+0x6d0/0x6d0 [ 2395.566435] ? __fget_files+0x296/0x4c0 [ 2395.567322] ? __fget_light+0xea/0x290 [ 2395.568189] __sys_sendmmsg+0x195/0x470 [ 2395.569076] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2395.570040] ? lock_downgrade+0x6d0/0x6d0 [ 2395.570976] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2395.572041] ? wait_for_completion_io+0x270/0x270 [ 2395.573107] ? rcu_read_lock_any_held+0x75/0xa0 [ 2395.574138] ? vfs_write+0x354/0xa70 [ 2395.574967] ? fput_many+0x2f/0x1a0 [ 2395.575773] ? ksys_write+0x1a9/0x260 [ 2395.576611] ? __ia32_sys_read+0xb0/0xb0 [ 2395.577520] __x64_sys_sendmmsg+0x99/0x100 [ 2395.578470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.579610] do_syscall_64+0x33/0x40 [ 2395.580432] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2395.581539] RIP: 0033:0x7f70f6d55b19 [ 2395.582352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.586326] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2395.587958] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2395.589489] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2395.591026] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2395.592554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2395.594101] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:20:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, 0x2d, 0x0, 0x4}) finit_module(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000080)=""/202, 0xca}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x6) 14:20:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/139, &(0x7f0000000000)=0x8b) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000bd0a00000f"], 0x1c}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'\x00', {0x2, 0x0, @loopback}}) 14:20:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1b, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35333334383534323200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000dced220ba9804d58a8dffc387fa17f8a010000000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010500)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004000200000000000000050000000d00"/64, 0x40, 0x1500}, {&(0x7f0000010f00)="20000000181166091811660900000000d7f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f00000000000002001600000000000000000000000e0000000f000000100000001100000012000000130000001400000015000000160000001700000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x4}, {&(0x7f0000011100)="ed4100003c000000d8f4655fd8f4655fd8f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000007782994400000000000000000000000000000000000000000000000020000000181166091811660918116609d8f4655f181166090000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011200)="ed8100001a040000d8f4655fd8f4655fd8f4655f0000000000000100040000000000000001000000190000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000567a372d00000000000000000000000000000000000000000000000020000000181166091811660918116609d8f4655f181166090000000000000000", 0xa0, 0x2000}, {&(0x7f0000011300)="ffa1000026000000d8f4655fd8f4655fd8f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3533333438353432322f66696c65302f66696c653000000000000000000000000000000000000000000000ae16d32f00000000000000000000000000000000000000000000000020000000181166091811660918116609d8f4655f181166090000000000000000", 0xa0, 0x2100}, {&(0x7f0000011400)="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", 0x1a0, 0x2200}, {&(0x7f0000011600)="ed81000064000000d8f4655fd8f4655fd8f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c9b7d742800000000000000000000000000000000000000000000000020000000181166091811660918116609d8f4655f181166090000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x2400}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x3400}, {&(0x7f0000011800)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x3800}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x4400}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x4800}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x4c00}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x5000}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x5400}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x5800}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000012300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x6400}], 0x0, &(0x7f0000012800)) 14:20:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xf20b0000, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:20:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000400)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[], 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26b, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) write$binfmt_aout(r2, &(0x7f0000000100)={{0x0, 0x81, 0xfe, 0x0, 0x0, 0x1}, "", ['\x00']}, 0x120) [ 2395.832909] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:20:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xfcffffff, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2395.933306] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:20:51 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000300)={0xffffff7f, 0x0, 0x9, &(0x7f0000000200)="4ee327a473f665be59"}) openat(0xffffffffffffff9c, &(0x7f0000006440)='./file0\x00', 0x8000, 0xd0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/245, 0xf5}, {&(0x7f0000001480)=""/102, 0x66}], 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) 14:20:51 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 14) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:20:51 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x658ad000) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000001c0)={0x101}) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x5, 0x4, 0x5c, 0x20, 0x0, 0x4, 0x5401, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xec, 0xfa4}, 0x300, 0x7, 0x9, 0x9, 0x1, 0x4, 0x6, 0x0, 0x8, 0x0, 0x8001}, 0x0, 0x10, r3, 0x9) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000240)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/uprobe', 0x3078c2, 0x8) signalfd4(r3, &(0x7f0000000280)={[0x8]}, 0x8, 0x81800) fsmount(r4, 0x0, 0x8b) syz_open_dev$evdev(&(0x7f0000000040), 0x61d, 0x2) r5 = fsopen(&(0x7f0000000080)='minix\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000100)='\xae5\x00', &(0x7f0000000140)="f99b5fb81838d5f4cd21ab19c98ea29260d8abe6dbf5b44894aba0b36d1e6b9dfd4891b4c90a2fda79b6373e4febe086af9adc91bfef899d0cc6002d70662319f44d2b5f2242f353d51ec8b51090026873c52d8574bdf2a5296bacf2ff67ab2061382867b8b48c8b3e755296ced42f16aa4b0a2db972b2fea03a", 0x7a) 14:20:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r3, &(0x7f0000002d00)=ANY=[], 0x6) readv(r3, &(0x7f00000012c0)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001140)=""/36, 0x24}, {&(0x7f0000001180)=""/172, 0xac}, {&(0x7f0000001240)=""/4, 0x4}], 0x3, &(0x7f0000001300)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000001880)=[{&(0x7f00000014c0)=""/125, 0x7d}, {&(0x7f0000001540)=""/212, 0xd4}, {&(0x7f0000001640)=""/225, 0xe1}, {&(0x7f0000001740)=""/59, 0x3b}, {&(0x7f0000001780)=""/208, 0xd0}], 0x5, &(0x7f0000001900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x60}}], 0x2, 0x10000, 0x0) recvmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001a00)=""/190, 0xbe}, {&(0x7f0000001ac0)=""/46, 0x2e}, {&(0x7f0000001b00)=""/228, 0xe4}, {&(0x7f0000001c00)=""/254, 0xfe}, {&(0x7f0000001d00)=""/131, 0x83}, {&(0x7f0000001dc0)=""/11, 0xb}], 0x6, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000001f00)=""/15, 0xf}, {&(0x7f0000001f40)=""/27, 0x1b}, {&(0x7f0000001f80)=""/178, 0xb2}, {&(0x7f0000002040)=""/83, 0x53}, {&(0x7f00000020c0)=""/144, 0x90}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x6, &(0x7f0000003200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003280)=""/44, 0x2c}, {&(0x7f00000032c0)=""/208, 0xd0}], 0x2, &(0x7f0000003400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x101, 0x0) [ 2413.040433] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2413.060591] FAULT_INJECTION: forcing a failure. [ 2413.060591] name failslab, interval 1, probability 0, space 0, times 0 [ 2413.063626] CPU: 0 PID: 18685 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2413.065308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2413.067127] Call Trace: [ 2413.067698] dump_stack+0x107/0x167 [ 2413.068484] should_fail.cold+0x5/0xa [ 2413.069309] ? __alloc_skb+0x6d/0x5b0 [ 2413.070144] should_failslab+0x5/0x20 [ 2413.070961] kmem_cache_alloc_node+0x55/0x330 [ 2413.071924] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2413.073071] __alloc_skb+0x6d/0x5b0 [ 2413.073861] __ip_append_data+0x2930/0x3310 [ 2413.074810] ? raw_destroy+0x30/0x30 [ 2413.075621] ? ip_finish_output+0x330/0x330 [ 2413.076564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2413.077664] ? ipv4_mtu+0x1ed/0x2c0 [ 2413.078480] ? raw_destroy+0x30/0x30 [ 2413.079293] ip_append_data+0x114/0x1a0 [ 2413.080174] raw_sendmsg+0xaa6/0x29d0 [ 2413.081019] ? dst_output+0x170/0x170 [ 2413.081853] ? __lock_acquire+0x1657/0x5b00 [ 2413.082829] ? perf_trace_lock+0xac/0x490 [ 2413.083739] ? SOFTIRQ_verbose+0x10/0x10 [ 2413.084607] ? create_object.isra.0+0x3ad/0xa20 [ 2413.085602] ? __lockdep_reset_lock+0x180/0x180 [ 2413.086621] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2413.087720] ? find_held_lock+0x2c/0x110 [ 2413.088609] ? trace_hardirqs_on+0x5b/0x180 [ 2413.089537] ? dst_output+0x170/0x170 [ 2413.090376] inet_sendmsg+0x11d/0x140 [ 2413.091197] ? inet_send_prepare+0x540/0x540 [ 2413.092153] __sock_sendmsg+0x13c/0x190 [ 2413.093035] ____sys_sendmsg+0x334/0x870 [ 2413.093932] ? sock_write_iter+0x3d0/0x3d0 [ 2413.094848] ? do_recvmmsg+0x6d0/0x6d0 [ 2413.095688] ? perf_trace_lock+0xac/0x490 [ 2413.096595] ? __lockdep_reset_lock+0x180/0x180 [ 2413.097621] ? perf_trace_lock+0xac/0x490 [ 2413.098555] ___sys_sendmsg+0xf3/0x170 [ 2413.099417] ? sendmsg_copy_msghdr+0x160/0x160 [ 2413.100424] ? lock_downgrade+0x6d0/0x6d0 [ 2413.101333] ? lock_downgrade+0x6d0/0x6d0 [ 2413.102254] ? __fget_files+0x296/0x4c0 [ 2413.103138] ? __fget_light+0xea/0x290 [ 2413.104000] __sys_sendmmsg+0x195/0x470 [ 2413.104877] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2413.105821] ? lock_downgrade+0x6d0/0x6d0 [ 2413.106762] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2413.107812] ? wait_for_completion_io+0x270/0x270 [ 2413.108870] ? rcu_read_lock_any_held+0x75/0xa0 [ 2413.109886] ? vfs_write+0x354/0xa70 [ 2413.110715] ? fput_many+0x2f/0x1a0 [ 2413.111503] ? ksys_write+0x1a9/0x260 [ 2413.112326] ? __ia32_sys_read+0xb0/0xb0 [ 2413.113221] __x64_sys_sendmmsg+0x99/0x100 [ 2413.114157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2413.115289] do_syscall_64+0x33/0x40 [ 2413.116102] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2413.117219] RIP: 0033:0x7f70f6d55b19 [ 2413.118040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2413.122060] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2413.123725] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2413.125278] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2413.126849] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2413.128403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2413.129942] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2413.154993] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000007dc0)={&(0x7f0000000040), 0xc, &(0x7f0000007d80)={&(0x7f0000003580)={0x47d4, 0x20, 0x400, 0x70bd2d, 0x25dfdbff, {0xc}, [@typed={0x8, 0x5d, 0x0, 0x0, @u32=0x3}, @nested={0x12cb, 0x65, 0x0, 0x1, [@generic="1853276dc51eb7de1795cfa433db1087fa7ee41b9016fad3deba78983a3f832bdf3892cc83365e16f880482815a2aca4dbe958718ab20bc05bbec8e014a09c805b1aec703c2562f57cbde0afd21b30460bf258c072a145d5f9e5fab6f2ddc452f09dffe7922f4fe296c18ba6dafafc4e1ce9c30df8f6ddc0183adac3a399a5db5017462a515ed5cd47e68ed965a5ea421203899c22f273162de4d40b9209cc9a979199383de2a4e0e8bb090684d00ce69cd3e38469d442750eae8f8190bc8924a63a3ecf68c9fa26aa72fa83586cb9b5395ce8ba60cdb7027394529ad6ab4b46f1ef3be57c2840e9cc053d", @typed={0x58, 0x57, 0x0, 0x0, @binary="496a682ee8f982764d7076aece2421f3d697a3cb47620b471371f294e2bf4392aa03f28ee32943431c260b93461898eba99a3b32452907971c2cdd47af3dd0db87ba81e7bd5ef4e0026e7cce112d704c8af5ff3d"}, @generic="5ee9d694639cc9fb95f93c86cbd0a62fccd5e7df1f0e5beab217692b4021b57df4749fed873105c2c73946110955961a6f5bcc", @typed={0x7, 0x82, 0x0, 0x0, @str='}[\x00'}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}, @generic="fd89b93ced14aa578b65df367bf58d307deb3a68c14b031fe2c04e3303780827ece80384e9611ff0dd99cde04011cca5ee7fddf38c7064", @generic="76950a30b73588520a8fe8218ff02d905af0e6e188a9dae2e4d547b02ef5b9bc9bf5f38088134cc16ac1fbab3c43dc9d0e06dda95311baac4df1", @generic="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", @generic="035ca012da3e6af0aa825dd2922e8ecb2bd7b915cdfa0d329b816f6cec02d2c7f371ff0ee39f40d8e16130a431dcbb4e47cd0611ca43e7228ed5c598e3a26dc2f7494fc9c8ec3bd45d0cdc3a0eb8190e351eeb8c5484e1afad076cfb76ef3898be0472989ed69ecf5ed0244f3f72100fcfe20287586c34c34a64577ff6664faae4ac250c5661bf9c5ee5e1b8430b00412370ab3326e77ecb36a343bc71b0eb928e7e8e2b9ab2e8f23b340d1b7b2c8eecdadb5eee2c67748daf273c074a6fb3cc8bba4ebedca0a7c9c6253db3f75896ae"]}, @generic="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", @typed={0x8, 0x69, 0x0, 0x0, @fd=r2}, @generic="1f6a527f45dcc726d6bae6999a5e9512ee228e2d33ffc0ff603914fd1ae7849d13da2dff49f6982c1d3cf0d8d61a942b9725df9b932a83dcf2ac4b623a80022b8a72947c1fc0ebe7bafc90d1c7cd72734bed619829fec357b87016ff86a6666b6efaa1eac973169b0fef486842b94c568832fd96e597697ecbe992a1449d16d185eba449de1a92a49f93af916a66f346f80956e8db088b332ec71a73bda86fe87d8c622e645487fac97087169b5090327ac8279e61023e92af29bb65db21f00d7f9a3dff780a81a97df28eb499c078efb35ede54bad4518be8019df1a0f420ffd9f74b96", @nested={0x10fb, 0x38, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x89, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x9}, @generic="6f7b581e6c8a32eed3166d19fadc08145bb880645f03859a6c0bcd8bb064bd75187e0c6b72b78f1b0342e6217c6e760caef2ca535b874990ee5004af34bf78e86646b31d7114ffb6d0bcc151f1c5ff12aea81152740c4976149284ccf35475a457d4a68e6627370aa61ce5cdba79f26ae3b139019f93962f1727f56602c94290d7601f473fa4f50d039891dabe31ed785ccc2de8b88d1d07d8d896cb7e1811e78ef49d9aa17b89e3bbc8654a350b84eb75af2862a3bc3ab5566c6fdef275e8a535517a9674c0ea73d7b49b", @generic="f902972aaf5b8874a22748702a157355358213c89a0c9757d4c64abfd15c66ed404fa97e0e58dbd12982fb83af3be53818e7bc63868504e9d7c876aff99555c6e97fa777068c4d33a5a5ab7b865596863e3679af407b2ecf8b9b35bd9bff06798b5bd61bbd9e1b9c73f4f62533f4a116ac7685b87473d04d15fd29afc8f362929ecca33a973e0573b2f057c5dcc02be910959395d656f660784918020c53eba57a58811718ed17a51db99762bdaa4738c304114f759ec7f20bba039ad3c05806dedec0b5e3d1650ed12cc2fdde8fa0fae77398aab20f1c5f0bff78ad369badf2ae4d9a7ec553ef522b35e5316c5b3706104e9d215ab7f20b9210efd84fcfce03076dfd56ba63a5e829246f9f83a9034eaec66f808203639233943876dc68f95c993387814cd9a5a23c8298695db600b6cfc5f42e301e482eed15efaeecb18f0e4ea8766b1e4bdfa6fabef1a767912dbf35156bab470b1875f56f695581e1e82ed093baea38a8078cd791203b9b5643bf3d7200b12ba535fb53598d608580673ef4f469651cca9b075a5e03780b8586fa5e0d47fb5903c837628507c4ded69c33fd6c4e14f9355a7bfae554e58dbdb8a91b93d78e838aa5a6c021fc7d833a19bd4471f6dca3d0261082f90b08490780d1ef442573d355e664c5a2e8834fcf549f0d951caafd271b66d61f92fd7929ef23960622400c2b7b265dd252cbfe27d42971f300d623f94a883aa938e53f51991093dfce1c9ef9089bf52cbc007a41dbf0c60b929d693b9081990b6ccf415b800a442728251ced542e85f74bfdb392c285a244741d90d4da82e343825f8dde2778b384f9f001920bc919d2728c4b6a1727c2cc401b06d07fbb9c3de0946af5361eb0e35b54f7cf00db522150f1980243830ee6f10f0a07775f7d4fdd3d9c6bb87f25b158f0eb21b373d0d00dfc0d604c707906844e87a7366edd0e018d19745ddb6a761c8e8f2705e61730a3efe494364304f2af942c9e27189bb7462f712450c533c9296b4f741e3b0eaca8d3fcac9a1e9d927fbcb1d8c998551c67c5437bb86535a12af301f38893afee219f5164cf6a7b181e3a2e24d199e0f4340f76455f972d83427675eaeb56433e430ba6975777ef5395b1ee0307dac7b82a9b8f1a3cc2645fb645ac869b9b8012b9a36aef4d2f58dea6ed790b4080646b28b759eb99d2d43f66cfd483df6d93d31cd22e5be22ee5b0dbb454a77b35ee8972f6364fb9c6ed324dc21e6963b24fd5b4bcfc6351d0513865a72d9c723c5eea8aada899b913490314222e523564746dfdc9ee2b7906289c1c763bcac7ae31c178758e3a208186e5b1cc59a01c2bdd4763826f02a32d6e2460543797b3dd77376c3e46275373b605a3da3962997a722918cbafd86344ba9d2f4635ea7b789a1224b45883a6f92be58dd8c07a102b1e5de1469ce0afb6d183b524285b6f837904d4af5c090eeafe52a6a1c5d3ca92badc72b8498f03a409245fe5469bfb6d4f4e468c13266846bc14c76807d568cd7cb03b796ae4ba4a58810ab36dc7ed71bb130f32cc5a12e3367b1fb319f5329e52b63727df2d140ac5d41589c81f0b1916cbb95c23c86c750db3cd79ad5c427162ab89ec37114080d180cfb7feafeafdbebca4f5177d6e95f77a5d819582cbf834a9e83e3f6b1e5b57be20a5f609d519a8f7cc8aa816a42c8b218c1e094794e180a44dc4e0a562e34dc600b79dd95bb869bedbce77a5205311ca785724377206fec72904418aab625aa815ade2b1c117c94f66b436675889f5128e1a67e95e4c49a80e3215a4f41fffb0341580f7e8ed391febfabbf9bb192ced12454c2e4186b31cf4b843934d13dcade7d33fecec6549000ce3dd9a54376e328fae5964d7091af8214339ae4506d93bd17940d06dbde9e4767ff52349efeb83740ba7f55b9d60dcb260979cc58efb55b54dd7ea8e129386c6ad6d3ec5428d084a8a73b3754f5759d75ff47b405cc9a265bb7cb5360a298d46190773d3a5df88c67c3d994a6b0f775f0fe564acc7739d67d78dd5022f645d614129d93df29abd8df429d57669edc4c9fbe68b4489dd67d5e1c6857c826af29a8414996b4f159b891e21008cab8e1d7bd732c876728c7671a5f49674d1f18974d19dfa9df5656eca44ff17153684c61955e0b06e80251289c9e42f978f0dc11d9d6d35267a04b07d8eb59c22c6359da15afd5e27293d8d4149dd000bb8bd1f5b3ae0970704187f882135d9665e8f61cbbbbc40df0ed59e78c599d5dc711b3eac7ac7dfa871ec661492f351fc8c1bca2a125fa4d91b73a1a79d661678d5a1348c0e6aa586c3e1a2f67b21a27c48ef053f103c70e3ce67eced91266f21c59d9ee6eb865dc2fc71910b6d91e582b3bb6506b1fdc1bd2b26e93b33442a0b067e1faa2c69f748e342925180ccbf7454e59b84406f3ee302c7b046551434ef8c35a620ecc45201523daae0833e08f6df2df4ded19554193dd0e55287cd0cfe4b6732139254a15d6deceaf80727bf8fa87bdac8b43cbc55f4b38514c14dd431bd2d5151c26b84ddfaa2b2309210791118335b86fd42cf18744005681b6710558c84106b19001db239f3b5e5658150070a80e6249dc48cfa61ac2e2c6ad2f7f130aef516022314cad42163b8e0aff72125192a70c11fbbffa722217b9489dc3f35ab06c5e50c1bbd060885e7f3cca89c2bf296edd0a2b7b86371c87536680e08c648fce81caa91a85201f79b47f5fd783bbebee21f99cb639b38420a4b3dfea26c9732e4fbd447b1a9ae9bf4e328a0c86be3318041c82f864438f8e0286b5ad207dbab49f17f3581700b113aba09898346e60c06146804aecaf5a3665d3875131f6c740de64568f9f9c596618f2118770ec2c741f8f70168d10b54c185dc2aeef306dc1cf28d7aaeefb1417a3d96c33d1e82f74d374daf0eba617894f6178dfb7c0acedf9a96ad1f2e0fc923891cf3bce3a900e89ee176903eaf655bd9fcf521f893f5b8c197628160d077722c82e72d76f6c84af6b39295f0e7aa2c9d0f47872fe736c7ddf7453504589faf3130aca374d34d60c2433445fb944acfc4f4d7615a4b4dd0ce68a9bbd1e2fae9ab10cf6c972814b8a45d89a07df079bc351dd26e947a6a39a9ff413c50014cd4fe9d398bbe37c14544a0ad62244a55395bf9a07569a06f40eae64ff367e62f7402cae7a2c20c1abb85626204e85df9a361292b4f21e5ccf78c712a011f5c0010f742bb28cf8473250ba7039420e301c9a5ba2c1ef62d6df4abf040e4ab635cd58e45517ed48e8b1d8b30717d759ff8978e72865072c4a3e4118a4f024b6541fbd2ff0e6d2970e99f75eeb0ebef136151f1951a3e2316bd923c3f3fe47c28a86c83998b9e9cd35ca9f57dec5635e5e438c001b3a55bc7488bb67a908c37a3183d3d17215fbb8b6d340aad10b97609c0bb1742863828853f6660e0f56d39b179b05014fbe2e2416feb955a620a68000f64bba201ff1b8c3e17dbb9285ec1e0a95a6c2d3ef887bfeb2c5865fee95e717de05edbdc6f36c4fca751605db36baa3149050496cc67008d40e2a29fb2642f5b65dc10d2adebbef43765170ab505dff940995ea2670de0c7ec9157d5c53962664c4ef6e527bf02696ff95258ad42bcd8e4f24682970227aeaebdda76841ca3448540e817585a7fd77c9cc1b2e28887dab3a018f6cc367fcbb84c163919f7efcb9f3447132dda9d7ecfe5dde8a9b08674f072090c2801ea57b58a3da810efd1ea2d49ad877ea479ef4e37702cdc08776022cf833ed227521580d966884bedaf370e55ca129d6a896a08cbb8cc3ec8402c49d70bfe6ae2286ddd48d771341d9e0c53ac4635f475d7fa3182f7dcc2dae0723ce7a3d078f6e4d734ca6d4e18456c0d476ab3b46ee0be86c9249e9b0341fe21af110a7e51438425bfea86a55847b57af63edd66f018b5d15ba88b5e70955e190676ab7d69d5ff769994efb788a57f9c2e5d6bcc37e1781971ebd39426c7853764e98881a35f8147ae0fa7b57df798f534dd93bbec38716898940ccddd6a4b18464f278bd964753b5ddfffc59a3f812a3bddcc6717b20377572a76175975f7ffc3e1f070e3b24dc28977e972098db1501aab9f2803566ede02a5cb2253744ca678729b2c5b0d30967b7fa9eda27c010eef9455d4b197cb36260a2868d4b02fab0a0e63383c0d5329e0f67ba3bb5129911edef14a21809fbba91d88bbee5cc50b90ed38e5d2c7d281efaf6f4e12a8bf19323d9a482b3f3e6f8daf5af986bc5daa4a5e8b136ff94ef290763557110c02b938f19742a6d682ea86a0e0f3de09c166ca0a39bf483288a066b60b96c770a5c3d4a978aa98f614165153bc4d79694ed9085b9c6454f6cda572d7eabcf39844659540c5f8b8685b29990e6d5a202829e2fb38746023ecc5b14a3b34bf310dc5b1f45622d5769859aca174eab4ca7939c1c39a7f3375f77aef08af003b50bcdc434eb9c7182fe51cbdbcdcd096b4c5659642612e372b2b041d9bdc1c4f3ef7b9d2e6618af387dbe5ac333c318b752a57b4af078b220a316283823c44425fc47ccee052229112d98c230fbedf255341c61a0428eb1a4b0cd75545e7c599abbf47f3553e74b78a4bb621b85fdc4b568a09e2e8b67c6c707e55be49f338a5e635f46cff1571287df96456bd4842732051394b9143ef0225ce4360335d1114117d16151311402d351f2cb9235e93cd71a7e3e2aa7879f0a07dcd49e1bfa1d593e5769543bc100b44127c97ca1072edfef2b9f3779fbe163b3c8d1b131fb4c6a2d5a22020d99e6478d9bd215ad699a4559026cc27a0d38cab760ef241902c725a4a16671f2f67b615ee10ecdbdc442602d6f3412dd63b6a77b12ccbcd63914d8e4dbb9974d51c1b6f9c939db2a8a9faba8a0fff220dec6357fc17428c3301cccbf65493917c6fa2d40ea8b9adf8549db857c33fb0d0c20544609c159af830e8b20592e1c6a451ef70baebdafb1009180df865bf66f06bd0c4bae131a0614d7ec85898f8773e8a2e033bb47bc8715b0d5616e1fe7b634ead36d122444d38ecfec54ae3572a828d1182c489ec7dbb18ff71d689a7024bf612f507a01c6992ada67630c0151f44c0a530dfed5bf93bb92791f08fc1f4cfcf800492040d0dff6884fa00acf1e50ee265edbe2613bbf41392d0643c6c2a5a98e797007924d7656c6115fb53fb759f4a6c82bf8c6046fddea5dba9231ec3bc93bbade29382c3c69837be473c8981f2cef3d2d3dac5d93abeb175b82fb7d2e8364008344eded8e668db07803c045644e363fcb0a9b8b777e8cc4604b8182d11afe5994ffeb169ae34a559949a12f977e9f2eb611e59f16a8fe4ad189bd442f4db7c1a75d787b617604810c7ca4b21f0e4f3aca967156dd2edc2a81f0c48000260955f65bf37b80db3bbd1d3e4c1519df56087c2f431022c5e3f408c65e880169dd91e5a1acfd44354c4beb8cadfe67702815dab28597c45de04308013a9cc9bb13123859d364e31e1a05d855d8fd765f84d7969e8c156507288d5344c3d35d4110733301f5971cd082410e67a4f7e6a88cd06c3ba9c836a33dd08f8ddfe74ef8febea50086e20e7d2718b523e67dbd3c7d8cd2a795d9336b4962a783bb32840090a2f60eeeee58e01608717d95090714dae19c655a8b4728abe6b2e4c63a42ad08ed90aa3ea49e4e942165c6bd84894c8c4d3aa3bd98dadd4367b4dd6c7e835e260a4182cebbc82b81e3169b110aa5f104a18ae128a3060111ad320c7ec590e543bf0c3ecf3486f9eb8b9fd", @typed={0xc, 0x77, 0x0, 0x0, @u64=0x68fe71ae}]}, @typed={0x8, 0x56, 0x0, 0x0, @uid}, @nested={0x12f9, 0x2a, 0x0, 0x1, [@generic="c73b3fddc9bbc9c4a65cc8788ae757c9b56dd80066a7aa3f38b63f83d9f325122e1e9bad36fa424f38d2b98c77c0c2e693ccbd1d9d1589cd7afb998e7c9a757d7dd5a7df232f3011", @generic="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", @generic="5ffa00b9d8", @generic="b72d257d3b261a2dc7ec361e5dd6421ad46b884eb24397ae3b260a3444da3aa578330b0cd7633a2f73bfd9054c95686383161777bf87616e0bbbea1bc5bddaffaac8ecfd28c18f1b6f1229b5694986cd10681fa76329654963b40b0252290b282bebf20e45fa268571c0ac97773f6260ba6b91e5af6e0e1fc0199850eed157d4e493dab0bd89616529d2042e90de0cccb041ba3a5f3a9ead5ec397f8f33cf609a0742a33961faabab6b9895fe1e3aa487e1861e048267d5653c5ed44c69aa718a3c0c83a845476f7a0e53c27eee154f529388103226e24f0aff8925c19b0ed", @generic="fce03af6f3e928", @generic="5a04", @generic="8b7868f43196b7867d7d33063c1d21ca6a93256d499aa45a55ac82b1afbef169697b327d3b4afefefc5094135cdd44c176966b8e868adf3218900111ec9f2db41b396b57f81bceac6329c2efd51c3230fa7e9f5d89ef3d818826aedf78e1bcc3cb4680090d3fc0e754343ed5b7958a62d8b5b501f08c7369680cdf092cc1a2fa480128e8f679b64fa7b5036f782f4aa790aa615238b39a6f810e308bb2ea7ebf68911fbb5fecd90b82c2e23938e0e1e6debe4e8b1a3940d177178bfb454ae8dc7a587cab2bfb38526952cb23f8d22f529ff8363934e0c9075176e68ebbe98d06d197f83c99832c18cdf7ae863fd9ea84", @typed={0xcf, 0x60, 0x0, 0x0, @binary="22c660d12ba1add17e976d1f5426772e16e97e01302243683c27d46a60dcb11a10184fdbc9b0991d5e01d9d9a42920daba83d36eb3feb0f77718d0ba68197838173deea61d9f273cb47e49baf94d3bafaac43fb5c437b66875dbac181066351e66f64f544913349b7b8e4e378142ff14e45898eae94981a7233a07ad1d73911417d269f5ea2767f8999ec799739d50b943d23ad60655d98c2226ec7628ad0198d7dbb261bf086ae8b4a6bf555a9dd3ee66b29546ac65bae04b7a5cec34372b2bbf05f04905862178f0649c"}]}]}, 0x47d4}, 0x1, 0x0, 0x0, 0x24000081}, 0x40080) 14:20:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:20:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./mnt\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) rmdir(&(0x7f0000000240)='mnt/encrypted_dir\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 14:20:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xffffe000, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:20:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x7, 0x20, 0x9, 0x0, {{0x7, 0x4, 0x2, 0x8, 0x1c, 0x65, 0x0, 0x2, 0x4, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x7, 0xc8, [@loopback]}]}}}}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r7], 0x38}}], 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r10], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000001e00)={0x2a18, 0x0, 0x838, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "da96cd9afca96e8993f89b63b97ea1e5492bc5838ec6674aa94ce2832a3d41574355064589cc6614a0f0831062f7b4a123da1f8d398d2b05fdb5811709e0f8237141f3188b5df848e2d0c436395f15f0a27db422cfe6c9d22eabb713820254fff97a93a0615f460decd4a399121eb5bcaecc093eb49f681ef325c5e169536bee435c16317e8e475ddd3061b87a797de26281d3693d70ad4ba4"}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xcd, 0x4, "41c82c90545fc3cef369eaf8ffcd301f479ac0b8e865ec138c095a85352e360b1d3c84534393fb66e27ebbe8d9bdcdd946536fcfd3fbd7df02cd8a959f68d8c7f4d7028da74a6d1737c7374af57500a08633d0dab48f4abfb94e75b8f9de8ee1ec9714ee398bcc2e2408ada288309286d3704ad0781b27947c29acb34d3646b753d1d1e29642ad805831f1b8b2a307b8bab16b94a4b4e9d297a96a02f1f51d1dfe33d7527ae193051f39642f1d65f1a8f2b22a0c4809802d99aec82dcfd76d6f3deb8fbfa3d31ab8a9"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x240, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x15}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\').&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%*#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x54cb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, ']-$-#!&*\\/\\@+:-@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-]&^\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%L$[\xb2)^$!)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc84}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}@\\,^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%Z]^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff00}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xe0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd21}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-/-*^-@\x04(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x97f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffbff}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':]\'/{+@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'\\\x83*].\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "b4c6b75a34b723fc03"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x148, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "6270eb819e5e7e1e"}, @ETHTOOL_A_BITSET_VALUE={0x27, 0x4, "80744cf7d1404b648ab4c174ef3f3955f28b9991912f54af078bcb28cfc866f5866def"}, @ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "bb0239c5c3ba2ff614cb82ae38876668b90ad333210ab9949faaaa5c510c599a0e5141e2fb4b9d47496fc373eda976436ac7dd0bd79351648f08a50287fcf2263bfe0107632210790af68d7e3e77ac65ef12dc418177622a3c5667e47407fe3716eff24b53c0e128a42614a084c64baa3e9f07845157c38abfe1b0f30493c04a1da22e0af86daf79c590e185c71bf5a30c9eff36ed2bba1cb0833f03a7348df7c157c125b236b06a61dc6a2bcaffa10e6e64ba06b52b8b6e90"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "bd0eb29576342c448c8113abc520e6c732f199627b6b3115353ac0f1f7bca99af89cbbb733a442b1bb88a718204fdf1c107ef0ab18b53869a7"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1250, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'e\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x90}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfb0f}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x89, 0x5, "44d3b2e13d6a4d9b9ac6ff3fd402ebe41caa6a36732a78da7393a06a562d2f616dd0cbc28ea13fe6d5c1acf0937b7a7aefe542896ffd6deadb2300cb421c74f04872a298cad37a53243c16d490b52335d418e80ea73c2220abc4d72a02182d7eb84a19786df2cd1977ed78cc04fe9a618c8174f0a7952f61046fe599b34e16fcbe455b8cb5"}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-@],\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '-\'-&/{:@.&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'%%[\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcc99}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "2de6f40969a65f5726219349f1d2ef9038eb95099e957d15bffbd01ebbd2c8b0edc8ce518fc5650744e7ae3c77a524c537a4e08178f0b5643b7c2ae87f3590804edcbc21ae9592ca8bdd844e5377eef2a55d58ee94fc9ff73caf7a9bf2234b6d36f6d7522adf79e80062a16cd947e8f1bcad01ef3ecd095d43be78e2f8e2cf7bbb2037cdd55a736ad3546d430cf3efb42f5cde0bc4bad3afd88c775ca61225ec95f31f"}]}]}, 0x2a18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r1, 0xaa1e4000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) 14:20:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xfffff000, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:20:52 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) syz_genetlink_get_family_id$batadv(0x0, r2) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r5, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="04002abd7020fd17b269e0ff1bfd320003008c920c8a2b3f39d5d72aebeb1d74c91ab7c12c66d4fb5e38cd7b394d36a9b4085bd85f679763106b69e6937a9958a5a24cc128bc0fa4", @ANYRES32=r6, @ANYBLOB="aed2d5c101651bc6bdf2223903fdb187eef25c94df8c56b5ed8278d1e02a75ae3d587186550f72add2a7f0d24f9fea9dd7b40a0baddf5e65f3d8f227477c082375608d2c6fc8200b61b020730de3c04967c9feba87120464ce0501bd839676a968bed5f77094f0890015ae0170413ad01e4545d8df58e3c322f1d100"], 0x1c}}, 0x4000080) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0xd0) r10 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22}, 0x0, 0x0, r10, 0x0) 14:20:52 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 15) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:20:52 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xffffff7f, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2413.342246] FAULT_INJECTION: forcing a failure. [ 2413.342246] name failslab, interval 1, probability 0, space 0, times 0 [ 2413.344116] CPU: 1 PID: 18803 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2413.345206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2413.346511] Call Trace: [ 2413.346937] dump_stack+0x107/0x167 [ 2413.347523] should_fail.cold+0x5/0xa [ 2413.348139] ? create_object.isra.0+0x3a/0xa20 [ 2413.348884] should_failslab+0x5/0x20 [ 2413.349502] kmem_cache_alloc+0x5b/0x310 [ 2413.350168] create_object.isra.0+0x3a/0xa20 [ 2413.350873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2413.351681] kmem_cache_alloc_node+0x169/0x330 [ 2413.352400] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2413.353252] __alloc_skb+0x6d/0x5b0 [ 2413.353838] __ip_append_data+0x2930/0x3310 [ 2413.354583] ? raw_destroy+0x30/0x30 [ 2413.355202] ? ip_finish_output+0x330/0x330 [ 2413.355913] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2413.356718] ? ipv4_mtu+0x1ed/0x2c0 [ 2413.357304] ? raw_destroy+0x30/0x30 [ 2413.357898] ip_append_data+0x114/0x1a0 [ 2413.358541] raw_sendmsg+0xaa6/0x29d0 [ 2413.359167] ? dst_output+0x170/0x170 [ 2413.359772] ? __lock_acquire+0x1657/0x5b00 [ 2413.360483] ? perf_trace_lock+0xac/0x490 [ 2413.361142] ? SOFTIRQ_verbose+0x10/0x10 [ 2413.361787] ? create_object.isra.0+0x3ad/0xa20 [ 2413.362547] ? __lockdep_reset_lock+0x180/0x180 [ 2413.363314] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2413.364114] ? find_held_lock+0x2c/0x110 [ 2413.364774] ? trace_hardirqs_on+0x5b/0x180 [ 2413.365460] ? dst_output+0x170/0x170 [ 2413.366082] inet_sendmsg+0x11d/0x140 [ 2413.366691] ? inet_send_prepare+0x540/0x540 [ 2413.367397] __sock_sendmsg+0x13c/0x190 [ 2413.368022] ____sys_sendmsg+0x334/0x870 [ 2413.368660] ? sock_write_iter+0x3d0/0x3d0 [ 2413.369316] ? do_recvmmsg+0x6d0/0x6d0 [ 2413.369936] ? perf_trace_lock+0xac/0x490 [ 2413.370622] ? __lockdep_reset_lock+0x180/0x180 [ 2413.371357] ? perf_trace_lock+0xac/0x490 [ 2413.372006] ___sys_sendmsg+0xf3/0x170 [ 2413.372649] ? sendmsg_copy_msghdr+0x160/0x160 [ 2413.373389] ? lock_downgrade+0x6d0/0x6d0 [ 2413.374070] ? lock_downgrade+0x6d0/0x6d0 [ 2413.374724] ? __fget_files+0x296/0x4c0 [ 2413.375345] ? __fget_light+0xea/0x290 [ 2413.375965] __sys_sendmmsg+0x195/0x470 [ 2413.376600] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2413.377295] ? lock_downgrade+0x6d0/0x6d0 [ 2413.377965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2413.378746] ? wait_for_completion_io+0x270/0x270 [ 2413.379490] ? rcu_read_lock_any_held+0x75/0xa0 [ 2413.380213] ? vfs_write+0x354/0xa70 [ 2413.380393] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2413.380784] ? fput_many+0x2f/0x1a0 [ 2413.383221] ? ksys_write+0x1a9/0x260 [ 2413.383823] ? __ia32_sys_read+0xb0/0xb0 [ 2413.384452] __x64_sys_sendmmsg+0x99/0x100 [ 2413.385110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2413.385926] do_syscall_64+0x33/0x40 [ 2413.386526] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2413.387318] RIP: 0033:0x7f70f6d55b19 [ 2413.387915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2413.390689] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2413.391879] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2413.392972] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2413.394093] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2413.395208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2413.396306] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2413.506273] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2413.507582] CPU: 1 PID: 18812 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2413.508609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2413.509841] Call Trace: [ 2413.510253] dump_stack+0x107/0x167 [ 2413.510806] sysfs_warn_dup.cold+0x1c/0x29 [ 2413.511441] sysfs_do_create_link_sd+0x122/0x140 [ 2413.512145] sysfs_create_link+0x5f/0xc0 [ 2413.512749] device_add+0x703/0x1c50 [ 2413.513302] ? devlink_add_symlinks+0x970/0x970 [ 2413.514012] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2413.514845] wiphy_register+0x1da6/0x2850 [ 2413.515488] ? wiphy_unregister+0xb90/0xb90 [ 2413.516141] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2413.516924] ieee80211_register_hw+0x23c5/0x38b0 [ 2413.517612] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2413.518328] ? net_generic+0xdb/0x2b0 [ 2413.518869] ? lockdep_init_map_type+0x2c7/0x780 [ 2413.519531] ? memset+0x20/0x50 [ 2413.519996] ? __hrtimer_init+0x12c/0x270 [ 2413.520580] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 2413.521315] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2413.521986] ? hwsim_new_radio_nl+0x967/0x1080 [ 2413.522642] ? memcpy+0x39/0x60 [ 2413.523126] hwsim_new_radio_nl+0x991/0x1080 [ 2413.523737] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2413.524461] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2413.525398] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2413.526364] genl_family_rcv_msg_doit+0x22d/0x330 [ 2413.527054] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2413.527983] ? cap_capable+0x1cd/0x230 [ 2413.528554] ? ns_capable+0xe2/0x110 [ 2413.529083] genl_rcv_msg+0x33c/0x5a0 [ 2413.529625] ? genl_get_cmd+0x480/0x480 [ 2413.530212] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 2413.530947] ? lock_release+0x680/0x680 [ 2413.531511] ? __lockdep_reset_lock+0x180/0x180 [ 2413.532171] netlink_rcv_skb+0x14b/0x430 [ 2413.532751] ? genl_get_cmd+0x480/0x480 [ 2413.533306] ? netlink_ack+0xab0/0xab0 [ 2413.533869] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2413.534530] ? is_vmalloc_addr+0x7b/0xb0 [ 2413.535110] genl_rcv+0x24/0x40 [ 2413.535573] netlink_unicast+0x549/0x7f0 [ 2413.536156] ? netlink_attachskb+0x870/0x870 [ 2413.536788] ? __virt_addr_valid+0x128/0x350 [ 2413.537420] netlink_sendmsg+0x90f/0xdf0 [ 2413.538029] ? netlink_unicast+0x7f0/0x7f0 [ 2413.538636] ? netlink_unicast+0x7f0/0x7f0 [ 2413.539244] __sock_sendmsg+0x154/0x190 [ 2413.539811] ____sys_sendmsg+0x70d/0x870 [ 2413.540389] ? sock_write_iter+0x3d0/0x3d0 [ 2413.540983] ? do_recvmmsg+0x6d0/0x6d0 [ 2413.541534] ? perf_trace_lock+0xac/0x490 [ 2413.542140] ? __lockdep_reset_lock+0x180/0x180 [ 2413.542791] ? perf_trace_lock+0xac/0x490 [ 2413.543385] ___sys_sendmsg+0xf3/0x170 [ 2413.543928] ? sendmsg_copy_msghdr+0x160/0x160 [ 2413.544576] ? lock_downgrade+0x6d0/0x6d0 [ 2413.545149] ? finish_task_switch+0x126/0x5d0 [ 2413.545783] ? lock_downgrade+0x6d0/0x6d0 [ 2413.546381] ? __fget_files+0x296/0x4c0 [ 2413.546949] ? __fget_light+0xea/0x290 [ 2413.547498] __sys_sendmsg+0xe5/0x1b0 [ 2413.548026] ? __sys_sendmsg_sock+0x40/0x40 [ 2413.548628] ? io_schedule_timeout+0x140/0x140 [ 2413.549262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2413.549990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2413.550684] ? trace_hardirqs_on+0x5b/0x180 [ 2413.551275] do_syscall_64+0x33/0x40 [ 2413.551789] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2413.552479] RIP: 0033:0x7f0d4532db19 [ 2413.552989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2413.555567] RSP: 002b:00007f0d42861188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2413.556626] RAX: ffffffffffffffda RBX: 00007f0d454410e0 RCX: 00007f0d4532db19 [ 2413.557618] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2413.558613] RBP: 00007f0d45387f6d R08: 0000000000000000 R09: 0000000000000000 [ 2413.559571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2413.560540] R13: 00007ffeeb17701f R14: 00007f0d42861300 R15: 0000000000022000 [ 2413.751315] device lo entered promiscuous mode [ 2413.780930] device lo left promiscuous mode [ 2413.816270] device lo entered promiscuous mode [ 2413.818653] device lo left promiscuous mode 14:21:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff8100d600}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="fbb6ba06505483075a4e9835873cfe8860ce1e5a3ee160200dfce6d1784b763b62"]) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x13ac}, 0x1, 0x0, 0x0, 0x4010}, 0x24004861) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000800)=""/4096, 0x1000, 0x200) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) ftruncate(r2, 0xffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000140)={0x1, 0x9}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) fadvise64(r4, 0x4cd7a319, 0x8, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r5, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r6 = getpid() r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x100000001) ptrace(0x4208, r6) 14:21:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}], 0x1, &(0x7f0000012b00)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x7, &(0x7f00000016c0)=[{&(0x7f0000000140)="74d7012e08b1068f994aa049af9bcb103e335d354f2f8da79d40ce71c16e6fb6c35257db1835ab818d4260ab764598efc69055f0860be99650cf58b69dbdfb6bde2abe29c016e5ee70956810d397c206475d7c8b8c638a6a818cdf7f0ff98dcd04deae32a644740016133ed5c2dda21c76ea9e2ce003b17e", 0x78, 0x1f}, {&(0x7f0000000280)="24590298264b8cc6da22ad5408e3b6d50904ce035f55c114fae1822629a9897c1c60a4670d5eaa0ed4930327b87e24b28825b52a3f52f066b220b0ccfd42a25276c668b07f6f13af8392baddff29c3b099481ced31c026af2e8c8618381dc0c4c093ca38aa", 0x65, 0x8}, {&(0x7f0000000300)="643f66ed2af4c55ebdf8ef0b05b554ad609bdd9eb4ccce767fd869cbefdd1537ad8ab8427f5d5abba3958b373e93f3ea923b6d75f618ee0370100efc1fdece1ec18b6a3e50e464664474e457656d4b9793ba610a7d5281565a0748ce1e4b9203c466af7339031e915779f65ada7bfb8a6cf067a8941fa4479b078e9f70213621cf0e59e5060c5edeb2342c21352fa59d8a29664f9f0fd7ead6a6b058d2c307131199c6d5a5666eb7645477b8afd94f0f7e9e262248468c8fbd47c4429230016bca0dad7d2bef366569737a", 0xcb, 0x3ff}, {&(0x7f0000000400)="a07b814a09cca8a554359982ac28b7518fcf38ef068fe1c0812a838d2d9f1361874e52289a111e8ca2067ead5fb5253d108fb63f9837280b350293907c84b374d0eb3e2d27bcb2761e0a1922b2625860352a76363454cfd960e066164d5c8b2983b92d5bdae9db63169676b60d830d9b8d997c3d3923114bb08f56d94d838a9fffbe5857cf2e02a84776d809fac8b9266a7ffd8a3787805232e8ff1ebb3ddb8774670cd097e71240fa242b", 0xab, 0x6}, {&(0x7f00000004c0)="6fd3d543a4cf6de1e2a49086d2ab3de125938934c26f81e1a5eb357af0f7a58f95e3d46cf67fb08861c40e7c78f193cf26849d52c50d21bface6d184e6849fd3d2ef1a28c85122113ffaf898118b2c5d957ada69898daea18892de472b1a49cc5c84fb88803c0fc001cc4cda8ddcab92685e3b9255bbe32e7e8c70e3741d655652b17e5c25186e252da857e931429db4f7c49e4346fc9e382a4b0fa0373c9986157d8017226497cfd6176455b4ce279edbf6a64703526c1abe653f100c2571a0a75e1b019809f09daeaf", 0xca, 0x6688}, {&(0x7f00000005c0)="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", 0x1000, 0xfffffffffffff801}, {&(0x7f00000015c0)="b00447b4862fe2a788d730ad6b6e487fd6eb10647c4ae25c777beb9ba2ec565d34ed54ecc450d71ae4be074216879611157f86598f795e5dd64129f8e7028e76b121482ad2e945b88b84481ae9984b748fe788aff019a41b19506a3cbda7c55d7369ed9b091fb498b61d24f4b8c1028d5a07c371700f6a3a46ad7f098202f47118a7bb10904f3c091e67b64b6de13982be8e0a00e70334268245c397a2fd5182819a51275da8fd48906d09e8f40bfd2d10d04636ecc21a73f246a09381555cab19eb3912ea557739e839b131e31242bf98a457c23634e62a6070056c7ca950f74578007daea81f7a719f350d463681c60547ab73a2c0e855b7ecf026192265", 0xff, 0x9}], 0x40, &(0x7f0000001780)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @void}}}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x74]}}, {@size={'size', 0x3d, [0x25, 0x30, 0x30, 0x25, 0x78, 0x6b, 0x32, 0x40, 0x70]}}, {@huge_advise}, {@mode={'mode', 0x3d, 0xffffffffffffffff}}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_always}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x66, 0x64, 0x37, 0x39, 0x36, 0x35, 0x30], 0x2d, [0x31, 0x2f03bbed629a3d59, 0x30, 0x63], 0x2d, [0x62, 0x64, 0x63, 0x39], 0x2d, [0x61, 0x61, 0x37, 0x66], 0x2d, [0x39, 0x65, 0x2, 0x35, 0x32, 0x66, 0x8, 0x63]}}}, {@context={'context', 0x3d, 'system_u'}}]}) 14:21:09 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='F>\x00\x00o`\"', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf25880000000c009900070000006200000022003300e0185a00ffffffffffff080211000000505050505050f207040400058c030000"], 0x44}, 0x1, 0x0, 0x0, 0xa00a080}, 0x20000801) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRES32=r5, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESHEX]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 14:21:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r2, r0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./mnt\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) rmdir(&(0x7f0000000240)='mnt/encrypted_dir\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 14:21:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xffffff9e, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:21:09 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 16) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:09 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000300)={0xffffff7f, 0x0, 0x9, &(0x7f0000000200)="4ee327a473f665be59"}) openat(0xffffffffffffff9c, &(0x7f0000006440)='./file0\x00', 0x8000, 0xd0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/245, 0xf5}, {&(0x7f0000001480)=""/102, 0x66}], 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) 14:21:09 executing program 4: ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000140)='./file1\x00', 0x400000, 0x138) lstat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r2, 0x5, 0x8, 0x3}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) setfsgid(r3) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', r0, r3, 0x100) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000880)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001d01210c0000000000008000"/28, @ANYRES32=r1, @ANYBLOB="3fb9dcbfb27d143ba8db215644fe34d9a1409dc01ca3be9a594d7a023b05238632a3a4c3071a707f6b492cf78098ee3cb7403f00e99c42046829baf600000000000091a47f7fffacd56580eda0933b3f22294ca697a691aeee1e7d256b9411e37c185fff49d866bd9f427ff5ba"], 0x1c}}, 0x0) [ 2430.262011] FAULT_INJECTION: forcing a failure. [ 2430.262011] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.264462] CPU: 0 PID: 18831 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2430.265960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.267778] Call Trace: [ 2430.268352] dump_stack+0x107/0x167 [ 2430.269149] should_fail.cold+0x5/0xa [ 2430.269990] should_failslab+0x5/0x20 [ 2430.270840] __kmalloc_node_track_caller+0x74/0x3b0 [ 2430.271923] ? __ip_append_data+0x2930/0x3310 [ 2430.272909] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2430.274086] __alloc_skb+0xb1/0x5b0 [ 2430.274896] __ip_append_data+0x2930/0x3310 [ 2430.275869] ? raw_destroy+0x30/0x30 [ 2430.276713] ? ip_finish_output+0x330/0x330 [ 2430.277669] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2430.278794] ? ipv4_mtu+0x1ed/0x2c0 [ 2430.279605] ? raw_destroy+0x30/0x30 [ 2430.280422] ip_append_data+0x114/0x1a0 [ 2430.281307] raw_sendmsg+0xaa6/0x29d0 [ 2430.282185] ? dst_output+0x170/0x170 [ 2430.283029] ? __lock_acquire+0x1657/0x5b00 [ 2430.283988] ? perf_trace_lock+0xac/0x490 [ 2430.284901] ? SOFTIRQ_verbose+0x10/0x10 [ 2430.285779] ? create_object.isra.0+0x3ad/0xa20 [ 2430.286804] ? __lockdep_reset_lock+0x180/0x180 [ 2430.287822] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2430.288953] ? find_held_lock+0x2c/0x110 [ 2430.289847] ? trace_hardirqs_on+0x5b/0x180 [ 2430.290809] ? dst_output+0x170/0x170 [ 2430.291638] inet_sendmsg+0x11d/0x140 [ 2430.292477] ? inet_send_prepare+0x540/0x540 [ 2430.293423] __sock_sendmsg+0x13c/0x190 [ 2430.294317] ____sys_sendmsg+0x334/0x870 [ 2430.295200] ? sock_write_iter+0x3d0/0x3d0 [ 2430.296131] ? do_recvmmsg+0x6d0/0x6d0 [ 2430.296994] ? perf_trace_lock+0xac/0x490 [ 2430.297920] ? __lockdep_reset_lock+0x180/0x180 [ 2430.298954] ? perf_trace_lock+0xac/0x490 [ 2430.299873] ___sys_sendmsg+0xf3/0x170 [ 2430.300735] ? sendmsg_copy_msghdr+0x160/0x160 [ 2430.301751] ? lock_downgrade+0x6d0/0x6d0 [ 2430.302696] ? lock_downgrade+0x6d0/0x6d0 [ 2430.303605] ? __fget_files+0x296/0x4c0 [ 2430.304489] ? __fget_light+0xea/0x290 [ 2430.305344] __sys_sendmmsg+0x195/0x470 [ 2430.306232] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2430.307160] ? lock_downgrade+0x6d0/0x6d0 [ 2430.308095] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2430.309138] ? wait_for_completion_io+0x270/0x270 [ 2430.310207] ? rcu_read_lock_any_held+0x75/0xa0 [ 2430.311209] ? vfs_write+0x354/0xa70 [ 2430.312040] ? fput_many+0x2f/0x1a0 [ 2430.312851] ? ksys_write+0x1a9/0x260 [ 2430.313696] ? __ia32_sys_read+0xb0/0xb0 [ 2430.314621] __x64_sys_sendmmsg+0x99/0x100 [ 2430.315551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2430.316692] do_syscall_64+0x33/0x40 [ 2430.317513] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2430.318659] RIP: 0033:0x7f70f6d55b19 [ 2430.319483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.323546] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2430.325231] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2430.326816] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2430.328396] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.329952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2430.331538] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2430.344916] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:09 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x5, &(0x7f0000000080)=[{0xf2c0, 0x7, 0x6, 0x3}, {0x0, 0x6, 0x0, 0x6}, {0x7, 0x9, 0x4, 0x6}, {0x4, 0x8, 0x7f, 0x9}, {0x3793, 0x81, 0x1c, 0x800}]}) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$P9_RAUTH(r1, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x303102) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f00000000c0)={'\x00', 0x4, 0x3, 0x8}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000180)) [ 2430.421785] audit: type=1326 audit(138069.319:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18848 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe162a9b19 code=0x0 14:21:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xfffffff0, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:21:09 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 17) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2430.561474] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2430.602086] FAULT_INJECTION: forcing a failure. [ 2430.602086] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.604710] CPU: 0 PID: 18953 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2430.606262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.608066] Call Trace: [ 2430.608653] dump_stack+0x107/0x167 [ 2430.609448] should_fail.cold+0x5/0xa [ 2430.610297] ? create_object.isra.0+0x3a/0xa20 [ 2430.611296] should_failslab+0x5/0x20 [ 2430.612138] kmem_cache_alloc+0x5b/0x310 [ 2430.613031] create_object.isra.0+0x3a/0xa20 [ 2430.614006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2430.615140] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2430.616238] ? __ip_append_data+0x2930/0x3310 [ 2430.617235] __alloc_skb+0xb1/0x5b0 [ 2430.618029] __ip_append_data+0x2930/0x3310 [ 2430.619018] ? raw_destroy+0x30/0x30 [ 2430.619842] ? ip_finish_output+0x330/0x330 [ 2430.620803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2430.621921] ? ipv4_mtu+0x1ed/0x2c0 [ 2430.622728] ? raw_destroy+0x30/0x30 [ 2430.623545] ip_append_data+0x114/0x1a0 [ 2430.624419] raw_sendmsg+0xaa6/0x29d0 [ 2430.625268] ? dst_output+0x170/0x170 [ 2430.626102] ? __lock_acquire+0x1657/0x5b00 [ 2430.627091] ? perf_trace_lock+0xac/0x490 [ 2430.628011] ? SOFTIRQ_verbose+0x10/0x10 [ 2430.628912] ? create_object.isra.0+0x3ad/0xa20 [ 2430.629949] ? __lockdep_reset_lock+0x180/0x180 [ 2430.630992] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2430.632124] ? find_held_lock+0x2c/0x110 [ 2430.633036] ? trace_hardirqs_on+0x5b/0x180 [ 2430.633998] ? dst_output+0x170/0x170 [ 2430.634861] inet_sendmsg+0x11d/0x140 [ 2430.635699] ? inet_send_prepare+0x540/0x540 [ 2430.636671] __sock_sendmsg+0x13c/0x190 [ 2430.637555] ____sys_sendmsg+0x334/0x870 [ 2430.638456] ? sock_write_iter+0x3d0/0x3d0 [ 2430.639389] ? do_recvmmsg+0x6d0/0x6d0 [ 2430.640247] ? perf_trace_lock+0xac/0x490 [ 2430.641176] ? __lockdep_reset_lock+0x180/0x180 [ 2430.642214] ? perf_trace_lock+0xac/0x490 [ 2430.643135] ___sys_sendmsg+0xf3/0x170 [ 2430.643998] ? sendmsg_copy_msghdr+0x160/0x160 [ 2430.645014] ? lock_downgrade+0x6d0/0x6d0 [ 2430.645935] ? lock_downgrade+0x6d0/0x6d0 [ 2430.646874] ? __fget_files+0x296/0x4c0 [ 2430.647766] ? __fget_light+0xea/0x290 [ 2430.648634] __sys_sendmmsg+0x195/0x470 [ 2430.649521] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2430.650476] ? lock_downgrade+0x6d0/0x6d0 [ 2430.651417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2430.652490] ? wait_for_completion_io+0x270/0x270 [ 2430.653561] ? rcu_read_lock_any_held+0x75/0xa0 [ 2430.654597] ? vfs_write+0x354/0xa70 [ 2430.655424] ? fput_many+0x2f/0x1a0 [ 2430.656229] ? ksys_write+0x1a9/0x260 [ 2430.657065] ? __ia32_sys_read+0xb0/0xb0 [ 2430.657972] __x64_sys_sendmmsg+0x99/0x100 [ 2430.658923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2430.660053] do_syscall_64+0x33/0x40 [ 2430.660873] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2430.662012] RIP: 0033:0x7f70f6d55b19 [ 2430.662830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.666867] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2430.668554] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2430.670146] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2430.671727] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.673285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2430.674870] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2431.256250] audit: type=1326 audit(138070.154:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18848 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe162a9b19 code=0x0 14:21:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat(0xffffffffffffffff, &(0x7f0000001a00)='./file2\x00', 0x4042, 0x31) io_setup(0x5, &(0x7f0000000040)=0x0) chroot(&(0x7f0000000440)='./file2\x00') clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000540)={r4, r5+10000000}, 0x1, 0x1, 0x1}, 0x101) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r2, 0x0}]) openat$incfs(r2, &(0x7f0000000300)='.pending_reads\x00', 0xc6000, 0x8) unlink(&(0x7f0000000340)='./file2\x00') stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) sendfile(r0, r1, 0x0, 0x100000001) 14:21:25 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = inotify_init() pipe(&(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x283, &(0x7f0000000000)=0x0) dup2(r1, r2) io_submit(r3, 0x1, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @remote}, {0x1, @broadcast}, 0x20, {0x2, 0x0, @private=0xa010101}, 'ip6_vti0\x00'}) io_setup(0x2, &(0x7f0000000180)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) io_submit(r4, 0x2, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x9323, r5, &(0x7f00000001c0)="0b2aa35ad220740a7d00764ad50cf7", 0xf, 0x400}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x7fff, r6, &(0x7f0000000280)="37a26bca4de844ce4f2d684be16b72b1962073bf5da1cc3652538d74ad35cca0be09e57b0ecdc5647eea2a12691cb774e78ccb6c38375de25c53dcfeabf5e84cc1a03db0e757f7f0b61ebbd26c89c15399affb5c25f64b037b5f036629e369dc98268305c7edd32063fd20d5537b9ee565526bfe4f", 0x75, 0x80, 0x0, 0x0, r2}]) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000380)=0x80, 0x4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd, 0x7}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000003c0)={0x9, 0x100, 0x4}) [ 2446.262181] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x4004550f, 0x20000000) setsockopt$inet6_udp_int(r0, 0x11, 0x69, &(0x7f0000000000)=0x10000, 0x4) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0x40, 0xa6a, 0x2000, 0x1}) 14:21:25 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000300)={0xffffff7f, 0x0, 0x9, &(0x7f0000000200)="4ee327a473f665be59"}) openat(0xffffffffffffff9c, &(0x7f0000006440)='./file0\x00', 0x8000, 0xd0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/245, 0xf5}, {&(0x7f0000001480)=""/102, 0x66}], 0x3) 14:21:25 executing program 3: msgrcv(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xde, 0x3, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000000c0)=""/106) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x31, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x2, 0x22e) r2 = msgget$private(0x0, 0x4) msgsnd(r2, &(0x7f00000003c0)={0x2, "94b747e634bedf1ffadee22d55fd64493e0672a3af4696a181e77134b135fe6558b1663a51866df8c214b5ea7cb313a3033a1fa12b24d0ba422d198ff5da883d7a48ad9d76d1f9b496ceb41e2e8e69c006c1fde541f3cc71a082970d6612a69f8b35d1a74d4e7da437fdf2b6"}, 0x74, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) syz_io_uring_setup(0x72e7, &(0x7f0000000280)={0x0, 0x9b4b, 0x4, 0x0, 0x2ad, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x8, 0x0, &(0x7f0000000440)="43f3b639960708607feadc6329ff4c025e0c5c19f580333189113f571e410bf7c5865179ecdeb971d3625cbfbeb8cfe98e5c491a2261d4f19c3325f7ea3c1152b96c94ab0d4d434ccfc33a1991624f3e777d69f8daf4d94f4648e7c8f8f8263ca2c0cb99b0ccd6a9222dc9292717472bd4b85f2f167f4f", 0x40}, 0x101) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000380)) pipe2(&(0x7f0000000080), 0x0) 14:21:25 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 18) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:25 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x0, 0xff, 0x82, 0x0, 0x2, 0x8100, 0xd, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe8c, 0x1, @perf_config_ext={0x4, 0xffffffffbf120192}, 0x0, 0xffffffffffffff80, 0x0, 0x8, 0x6, 0x3, 0x7f, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x4, r2, 0x3) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104000) io_uring_enter(r7, 0x7dbb, 0xf3dd, 0x0, &(0x7f0000000280)={[0x80]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="017d3fd0f34d2a171ffeb74ec16500726501dcc4140c32f2179566787943e11b09cc9a93127ede609acbc3b9439493fb9a52bc6461414933382dfe536e0b4d1edd2821f1ac31763eb405529e140e22a0a95a"]) r9 = syz_genetlink_get_family_id$batadv(0x0, r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000428bd7000fbdf250c0000000800311001000006773f000000000000003a9d26a1c3d37aab4e8780acd73cd61ef547aa140c3ede5b9cc6925b84778decec811cd32db85a776cd11492f2dc771da897f6a9f230d24805d1edf2493335bf908c9affd01602631da73b20963ee46b65b8a7ad8398b67a187c55b3075195910ad20c3eb7574ad659e3c209"], 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r9, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004041) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x81) sendfile(r1, r0, 0x0, 0x4000007ffffffc) [ 2446.267900] FAULT_INJECTION: forcing a failure. [ 2446.267900] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.270467] CPU: 0 PID: 18969 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2446.271987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2446.273803] Call Trace: [ 2446.274398] dump_stack+0x107/0x167 [ 2446.275220] should_fail.cold+0x5/0xa [ 2446.276073] ? __alloc_skb+0x6d/0x5b0 [ 2446.276925] should_failslab+0x5/0x20 [ 2446.277777] kmem_cache_alloc_node+0x55/0x330 [ 2446.278792] __alloc_skb+0x6d/0x5b0 [ 2446.279615] __ip_append_data+0x2930/0x3310 [ 2446.280596] ? raw_destroy+0x30/0x30 [ 2446.281439] ? ip_finish_output+0x330/0x330 [ 2446.282421] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2446.283521] ? ipv4_mtu+0x1ed/0x2c0 [ 2446.284318] ? raw_destroy+0x30/0x30 [ 2446.285126] ip_append_data+0x114/0x1a0 [ 2446.286009] raw_sendmsg+0xaa6/0x29d0 [ 2446.286861] ? dst_output+0x170/0x170 [ 2446.287694] ? __lock_acquire+0x1657/0x5b00 [ 2446.288663] ? perf_trace_lock+0xac/0x490 14:21:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xfffffffc, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2446.289666] ? SOFTIRQ_verbose+0x10/0x10 [ 2446.290813] ? create_object.isra.0+0x3ad/0xa20 [ 2446.291819] ? __lockdep_reset_lock+0x180/0x180 [ 2446.292838] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2446.293960] ? find_held_lock+0x2c/0x110 [ 2446.294879] ? trace_hardirqs_on+0x5b/0x180 [ 2446.295837] ? dst_output+0x170/0x170 [ 2446.296671] inet_sendmsg+0x11d/0x140 [ 2446.297505] ? inet_send_prepare+0x540/0x540 [ 2446.298483] __sock_sendmsg+0x13c/0x190 [ 2446.299357] ____sys_sendmsg+0x334/0x870 [ 2446.300236] ? sock_write_iter+0x3d0/0x3d0 [ 2446.301153] ? do_recvmmsg+0x6d0/0x6d0 [ 2446.302008] ? perf_trace_lock+0xac/0x490 [ 2446.302931] ? __lockdep_reset_lock+0x180/0x180 [ 2446.303950] ? perf_trace_lock+0xac/0x490 [ 2446.304860] ___sys_sendmsg+0xf3/0x170 [ 2446.305713] ? sendmsg_copy_msghdr+0x160/0x160 [ 2446.306737] ? lock_downgrade+0x6d0/0x6d0 [ 2446.307648] ? lock_downgrade+0x6d0/0x6d0 [ 2446.308567] ? __fget_files+0x296/0x4c0 [ 2446.309467] ? __fget_light+0xea/0x290 [ 2446.310355] __sys_sendmmsg+0x195/0x470 [ 2446.311243] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2446.311264] ? lock_downgrade+0x6d0/0x6d0 [ 2446.311310] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2446.311336] ? wait_for_completion_io+0x270/0x270 [ 2446.311360] ? rcu_read_lock_any_held+0x75/0xa0 [ 2446.311377] ? vfs_write+0x354/0xa70 [ 2446.311401] ? fput_many+0x2f/0x1a0 [ 2446.311425] ? ksys_write+0x1a9/0x260 [ 2446.311446] ? __ia32_sys_read+0xb0/0xb0 [ 2446.313152] __x64_sys_sendmmsg+0x99/0x100 [ 2446.313171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2446.313192] do_syscall_64+0x33/0x40 [ 2446.313213] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2446.314853] RIP: 0033:0x7f70f6d55b19 [ 2446.314876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2446.314886] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2446.314913] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2446.330539] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2446.330552] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2446.330571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2446.334640] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:21:25 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000b, 0x10, r0, 0x0) fsmount(r0, 0x1, 0x84) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd=r3, 0x7fffffff, 0x80000000, 0x400, 0xa, 0x1, {0x1}}, 0x88) write$P9_RREADLINK(r6, &(0x7f0000001580)=ANY=[@ANYRESDEC=r5], 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000140)={0x0, 0x100000000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace(0xffffffffffffffff, 0x0) 14:21:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0xffffffff, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:21:25 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 19) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="00762f1b", @ANYRES16, @ANYBLOB="01000000000000", @ANYRES32=r1, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x200}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) fallocate(r3, 0x4, 0xa55, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="00762f1b", @ANYRES16, @ANYBLOB="01000000000000", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3c, 0x12}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xbf}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff42}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xd}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x8}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x22}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x70}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xd}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x6}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x38, r7, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x33, 0x27}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4001) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) [ 2446.622774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18993 comm=syz-executor.3 [ 2446.628943] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:21:25 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000300)={0xffffff7f, 0x0, 0x9, &(0x7f0000000200)="4ee327a473f665be59"}) openat(0xffffffffffffff9c, &(0x7f0000006440)='./file0\x00', 0x8000, 0xd0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x0) [ 2446.757557] FAULT_INJECTION: forcing a failure. [ 2446.757557] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.758791] CPU: 1 PID: 19000 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2446.759478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2446.760328] Call Trace: [ 2446.760606] dump_stack+0x107/0x167 [ 2446.760980] should_fail.cold+0x5/0xa [ 2446.761360] ? create_object.isra.0+0x3a/0xa20 [ 2446.761863] should_failslab+0x5/0x20 [ 2446.762260] kmem_cache_alloc+0x5b/0x310 [ 2446.762716] create_object.isra.0+0x3a/0xa20 [ 2446.763299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2446.763824] kmem_cache_alloc_node+0x169/0x330 [ 2446.764299] __alloc_skb+0x6d/0x5b0 [ 2446.764669] __ip_append_data+0x2930/0x3310 [ 2446.765105] ? raw_destroy+0x30/0x30 [ 2446.765483] ? ip_finish_output+0x330/0x330 [ 2446.765912] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2446.766604] ? ipv4_mtu+0x1ed/0x2c0 [ 2446.766975] ? raw_destroy+0x30/0x30 [ 2446.767371] ip_append_data+0x114/0x1a0 [ 2446.767900] raw_sendmsg+0xaa6/0x29d0 [ 2446.768441] ? dst_output+0x170/0x170 [ 2446.768838] ? __lock_acquire+0x1657/0x5b00 [ 2446.769301] ? perf_trace_lock+0xac/0x490 [ 2446.769736] ? SOFTIRQ_verbose+0x10/0x10 [ 2446.770170] ? create_object.isra.0+0x3ad/0xa20 [ 2446.770683] ? __lockdep_reset_lock+0x180/0x180 [ 2446.771198] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2446.771742] ? find_held_lock+0x2c/0x110 [ 2446.772182] ? trace_hardirqs_on+0x5b/0x180 [ 2446.772646] ? dst_output+0x170/0x170 [ 2446.773054] inet_sendmsg+0x11d/0x140 [ 2446.773467] ? inet_send_prepare+0x540/0x540 [ 2446.773958] __sock_sendmsg+0x13c/0x190 [ 2446.774394] ____sys_sendmsg+0x334/0x870 [ 2446.774826] ? sock_write_iter+0x3d0/0x3d0 [ 2446.775266] ? do_recvmmsg+0x6d0/0x6d0 [ 2446.775683] ? perf_trace_lock+0xac/0x490 [ 2446.776121] ? __lockdep_reset_lock+0x180/0x180 [ 2446.776606] ? perf_trace_lock+0xac/0x490 [ 2446.777040] ___sys_sendmsg+0xf3/0x170 [ 2446.777442] ? sendmsg_copy_msghdr+0x160/0x160 [ 2446.777922] ? lock_downgrade+0x6d0/0x6d0 [ 2446.778361] ? lock_downgrade+0x6d0/0x6d0 [ 2446.778807] ? __fget_files+0x296/0x4c0 [ 2446.779227] ? __fget_light+0xea/0x290 [ 2446.779659] __sys_sendmmsg+0x195/0x470 [ 2446.780077] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2446.780527] ? lock_downgrade+0x6d0/0x6d0 [ 2446.780972] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2446.781481] ? wait_for_completion_io+0x270/0x270 [ 2446.781989] ? rcu_read_lock_any_held+0x75/0xa0 [ 2446.782505] ? vfs_write+0x354/0xa70 [ 2446.782923] ? fput_many+0x2f/0x1a0 [ 2446.783322] ? ksys_write+0x1a9/0x260 [ 2446.783731] ? __ia32_sys_read+0xb0/0xb0 [ 2446.784153] __x64_sys_sendmmsg+0x99/0x100 [ 2446.784622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2446.785159] do_syscall_64+0x33/0x40 [ 2446.785544] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2446.786079] RIP: 0033:0x7f70f6d55b19 [ 2446.786489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2446.788389] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2446.789211] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2446.789946] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2446.790714] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2446.791478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2446.792208] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2446.796740] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:25 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x60042, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$FIONREAD(r0, 0x6801, 0x0) 14:21:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000004c0)={0x9000000a}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x240, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}, 0x1c) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2}, {r3, 0x82}, {r0, 0x8109}, {0xffffffffffffffff, 0x4}, {r0, 0x10090}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) [ 2446.879300] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 14:21:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0xc020200) unshare(0x2000000) 14:21:41 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) r0 = syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x6, @private0, 0x82}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00'}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x6, {{0xa, 0x4e24, 0x7, @empty, 0x1}}, {{0xa, 0x4e21, 0x0, @local, 0x8}}}, 0x108) chroot(&(0x7f0000000140)='./file2\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) 14:21:41 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x0, 0xff, 0x82, 0x0, 0x2, 0x8100, 0xd, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe8c, 0x1, @perf_config_ext={0x4, 0xffffffffbf120192}, 0x0, 0xffffffffffffff80, 0x0, 0x8, 0x6, 0x3, 0x7f, 0x0, 0x2, 0x0, 0xffff}, 0xffffffffffffffff, 0x4, r2, 0x3) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup2(r5, r4) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104000) io_uring_enter(r7, 0x7dbb, 0xf3dd, 0x0, &(0x7f0000000280)={[0x80]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="017d3fd0f34d2a171ffeb74ec16500726501dcc4140c32f2179566787943e11b09cc9a93127ede609acbc3b9439493fb9a52bc6461414933382dfe536e0b4d1edd2821f1ac31763eb405529e140e22a0a95a"]) r9 = syz_genetlink_get_family_id$batadv(0x0, r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000428bd7000fbdf250c0000000800311001000006773f000000000000003a9d26a1c3d37aab4e8780acd73cd61ef547aa140c3ede5b9cc6925b84778decec811cd32db85a776cd11492f2dc771da897f6a9f230d24805d1edf2493335bf908c9affd01602631da73b20963ee46b65b8a7ad8398b67a187c55b3075195910ad20c3eb7574ad659e3c209"], 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r9, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004041) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x81) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 14:21:41 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000300)={0xffffff7f, 0x0, 0x9, &(0x7f0000000200)="4ee327a473f665be59"}) openat(0xffffffffffffff9c, &(0x7f0000006440)='./file0\x00', 0x8000, 0xd0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x0) 14:21:41 executing program 6: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x423) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000280), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/85, 0x55}], 0x5, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000001980)=[{&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/74, 0x4a}, {&(0x7f0000001940)=""/23, 0x17}], 0x6, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001a80)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001b00)=""/37, 0x25}, {&(0x7f0000001b40)=""/87, 0x57}, {&(0x7f0000001bc0)=""/84, 0x54}, {&(0x7f0000001c40)=""/31, 0x1f}, {&(0x7f0000001c80)=""/112, 0x70}], 0x5, &(0x7f0000002e00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002ec0)=""/188, 0xbc}, {&(0x7f0000002f80)=""/225, 0xe1}, {&(0x7f0000003080)=""/23, 0x17}, {&(0x7f00000030c0)=""/223, 0xdf}], 0x4, &(0x7f0000005f40)=ANY=[@ANYBLOB="1c0000d5e0d1519d7d60145950dafd3f95a100d9af282070f23469789d92f2cc9784548a3e2f6241caf74b06d5c5deae21118e239ca3f093dcc946a4744b3f0737020e88ec5fa23b5822b0489a501c1632682df7bd3b52f58fe56f7f97f5f03104479dd2c6ec936457e2d753dc774a78da94383485d539f585aa5bfcda721b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}}, {{0x0, 0x0, &(0x7f00000032c0), 0x0, &(0x7f0000003300)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003380)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000003400)=""/173, 0xad}, {&(0x7f00000034c0)=""/87, 0x57}, {&(0x7f0000003540)=""/42, 0x2a}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/165, 0xa5}, {&(0x7f0000004640)=""/168, 0xa8}, {&(0x7f0000004700)=""/166, 0xa6}], 0x7, &(0x7f0000004840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000004940)=@abs, 0x6e, &(0x7f0000005b40)=[{&(0x7f00000049c0)=""/30, 0x1e}, {&(0x7f0000004a00)=""/187, 0xbb}, {&(0x7f0000004ac0)=""/23, 0x17}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/32, 0x20}], 0x5, &(0x7f0000005bc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}}], 0x8, 0x2042, &(0x7f0000005f00)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0045878, 0x0) 14:21:41 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 20) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:41 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x3) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long}, 0x14) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0xffff}}, 0x14) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) syz_open_dev$mouse(0x0, 0x8001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0xef7, 0x855, "30b5d578e2f6"}}) 14:21:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x2, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2462.693448] FAULT_INJECTION: forcing a failure. [ 2462.693448] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.696033] CPU: 0 PID: 19134 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2462.697523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.699320] Call Trace: [ 2462.699897] dump_stack+0x107/0x167 [ 2462.700690] should_fail.cold+0x5/0xa [ 2462.701525] should_failslab+0x5/0x20 [ 2462.702350] __kmalloc_node_track_caller+0x74/0x3b0 [ 2462.703444] ? __ip_append_data+0x2930/0x3310 [ 2462.704443] __alloc_skb+0xb1/0x5b0 [ 2462.705251] __ip_append_data+0x2930/0x3310 [ 2462.706218] ? raw_destroy+0x30/0x30 [ 2462.707058] ? ip_finish_output+0x330/0x330 [ 2462.708013] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2462.709128] ? ipv4_mtu+0x1ed/0x2c0 [ 2462.709929] ? raw_destroy+0x30/0x30 [ 2462.710766] ip_append_data+0x114/0x1a0 [ 2462.711649] raw_sendmsg+0xaa6/0x29d0 [ 2462.712488] ? dst_output+0x170/0x170 [ 2462.713325] ? __lock_acquire+0x1657/0x5b00 [ 2462.714294] ? perf_trace_lock+0xac/0x490 [ 2462.715203] ? SOFTIRQ_verbose+0x10/0x10 [ 2462.716093] ? create_object.isra.0+0x3ad/0xa20 [ 2462.717105] ? __lockdep_reset_lock+0x180/0x180 [ 2462.718152] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2462.719294] ? find_held_lock+0x2c/0x110 [ 2462.720216] ? trace_hardirqs_on+0x5b/0x180 [ 2462.721154] ? dst_output+0x170/0x170 [ 2462.721990] inet_sendmsg+0x11d/0x140 [ 2462.722829] ? inet_send_prepare+0x540/0x540 [ 2462.723781] __sock_sendmsg+0x13c/0x190 [ 2462.724643] ____sys_sendmsg+0x334/0x870 [ 2462.725520] ? sock_write_iter+0x3d0/0x3d0 [ 2462.726434] ? do_recvmmsg+0x6d0/0x6d0 [ 2462.727299] ? perf_trace_lock+0xac/0x490 [ 2462.728209] ? __lockdep_reset_lock+0x180/0x180 [ 2462.729234] ? perf_trace_lock+0xac/0x490 [ 2462.730150] ___sys_sendmsg+0xf3/0x170 [ 2462.731022] ? sendmsg_copy_msghdr+0x160/0x160 [ 2462.732033] ? lock_downgrade+0x6d0/0x6d0 [ 2462.732954] ? lock_downgrade+0x6d0/0x6d0 [ 2462.733883] ? __fget_files+0x296/0x4c0 [ 2462.734782] ? __fget_light+0xea/0x290 [ 2462.735669] __sys_sendmmsg+0x195/0x470 [ 2462.736552] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2462.737503] ? lock_downgrade+0x6d0/0x6d0 [ 2462.738441] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2462.739493] ? wait_for_completion_io+0x270/0x270 [ 2462.740560] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.741579] ? vfs_write+0x354/0xa70 [ 2462.742400] ? fput_many+0x2f/0x1a0 [ 2462.743221] ? ksys_write+0x1a9/0x260 [ 2462.744059] ? __ia32_sys_read+0xb0/0xb0 [ 2462.744963] __x64_sys_sendmmsg+0x99/0x100 [ 2462.745892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.747034] do_syscall_64+0x33/0x40 [ 2462.747847] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2462.748946] RIP: 0033:0x7f70f6d55b19 [ 2462.749774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.753740] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2462.755441] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2462.757003] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2462.758587] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.760158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.761726] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2462.799183] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x3, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2462.898293] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:41 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 21) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:41 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x31014, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xdc0f7e3c666f9b14) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c0000002000210c0010000000000000020000005e00968008005c000a01010139c2762ff9cd46040893b659739bb5f96c60227a0b25e7c1f111044109bafde0897a78eb44338c0cbc86d956293ee55fc2e0bb0b43645d2456c612cc7191a1cd49d904002c000c00ff00cc99000000000000000008000f00ac1414aa"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 14:21:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x4, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:21:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000043c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/224, 0xe0}], 0x2, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000400), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000540)=""/177, 0xb1}], 0x2, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000740)=""/77, 0x4d}, {&(0x7f00000007c0)=""/188, 0xbc}], 0x2, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000000a40)=""/21, 0x15}, {&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000b80)=""/49, 0x31}], 0x4, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000d80)=""/53, 0x35}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000e80), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000f00)=""/250, 0xfa}, {&(0x7f0000001000)=""/171, 0xab}, {&(0x7f00000010c0)=""/74, 0x4a}, {&(0x7f0000001140)=""/243, 0xf3}, {&(0x7f0000001240)=""/222, 0xde}, {&(0x7f0000001340)=""/130, 0x82}, {&(0x7f0000001400)=""/186, 0xba}], 0x7, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000016c0)=""/81, 0x51}, {&(0x7f0000001740)=""/133, 0x85}, {&(0x7f0000001800)=""/42, 0x2a}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000001900)=""/191, 0xbf}, {&(0x7f00000019c0)=""/12, 0xc}], 0x6, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001b00), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/155, 0x9b}], 0x1, &(0x7f0000001c80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000001dc0)=@abs, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001e40)=""/155, 0x9b}, {&(0x7f0000001f00)=""/202, 0xca}, {&(0x7f0000002000)=""/88, 0x58}, {&(0x7f0000002080)=""/113, 0x71}, {&(0x7f0000002100)=""/45, 0x2d}], 0x5}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f00000021c0)=""/180, 0xb4}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/68, 0x44}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x4, &(0x7f0000004340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0xa, 0xa0, &(0x7f0000004640)={0x77359400}) sendmsg$AUDIT_USER(r1, &(0x7f0000004800)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000047c0)={&(0x7f00000046c0)={0xdc, 0x3ed, 0x800, 0x70bd26, 0x25dfdbfb, "4e053b061c0cd237ae7554f249610e549443fb389bbe6381be3a267716b2df17e0737578aeec81fca4c02c7b376f22394373f58d4bd81ad2d0edc0802143633b9133bd67184b6fe8c035a604e9c207dc98b37503098961b161422c7c95f803d06465f25b1928fd602ff68ec7fc83bcaf3fdf05c0433e0b7196980e1934aa3a68e50303f59c79e29873a2f79b6521b38d02ac92cea3161e253fa9346810acf9951359da953f1c699572adb0f75ab16ea522f17abfc568b379643996227a16fbc57ce245ef36538af2ba56", ["", "", "", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r2}, @generic="abcad29ae099b15ad1ba38d71c95546a4de7394c5a9049ac0fc3cb508d07326b6c5ce932f4877d24b4f3dd32d7ed593ca025693e367811", @typed={0xc, 0x4, 0x0, 0x0, @u64=0x3fc}]}, 0x60}}, 0x4000000) [ 2463.033810] FAULT_INJECTION: forcing a failure. [ 2463.033810] name failslab, interval 1, probability 0, space 0, times 0 [ 2463.036195] CPU: 1 PID: 19252 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2463.037597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2463.039288] Call Trace: [ 2463.039823] dump_stack+0x107/0x167 [ 2463.040565] should_fail.cold+0x5/0xa [ 2463.041344] ? create_object.isra.0+0x3a/0xa20 [ 2463.042292] should_failslab+0x5/0x20 [ 2463.043069] kmem_cache_alloc+0x5b/0x310 [ 2463.043904] create_object.isra.0+0x3a/0xa20 [ 2463.044578] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2463.044800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2463.044828] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2463.044855] ? __ip_append_data+0x2930/0x3310 [ 2463.049659] __alloc_skb+0xb1/0x5b0 [ 2463.050404] __ip_append_data+0x2930/0x3310 [ 2463.051321] ? raw_destroy+0x30/0x30 [ 2463.052116] ? ip_finish_output+0x330/0x330 [ 2463.053000] ? raw_destroy+0x30/0x30 [ 2463.053773] ? raw_destroy+0x30/0x30 [ 2463.054557] ip_append_data+0x114/0x1a0 [ 2463.055398] raw_sendmsg+0xaa6/0x29d0 [ 2463.056186] ? dst_output+0x170/0x170 [ 2463.056972] ? __lock_acquire+0x1657/0x5b00 [ 2463.057879] ? perf_trace_lock+0xac/0x490 [ 2463.058744] ? SOFTIRQ_verbose+0x10/0x10 [ 2463.059557] ? create_object.isra.0+0x3ad/0xa20 [ 2463.060519] ? __lockdep_reset_lock+0x180/0x180 [ 2463.061496] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2463.062548] ? find_held_lock+0x2c/0x110 [ 2463.063412] ? trace_hardirqs_on+0x5b/0x180 [ 2463.064302] ? dst_output+0x170/0x170 [ 2463.065084] inet_sendmsg+0x11d/0x140 [ 2463.065878] ? inet_send_prepare+0x540/0x540 [ 2463.066790] __sock_sendmsg+0x13c/0x190 [ 2463.067612] ____sys_sendmsg+0x334/0x870 [ 2463.068468] ? sock_write_iter+0x3d0/0x3d0 [ 2463.069331] ? do_recvmmsg+0x6d0/0x6d0 [ 2463.070127] ? perf_trace_lock+0xac/0x490 [ 2463.070987] ? __lockdep_reset_lock+0x180/0x180 [ 2463.071963] ? perf_trace_lock+0xac/0x490 [ 2463.072817] ___sys_sendmsg+0xf3/0x170 [ 2463.073619] ? sendmsg_copy_msghdr+0x160/0x160 [ 2463.074585] ? lock_downgrade+0x6d0/0x6d0 [ 2463.075444] ? lock_downgrade+0x6d0/0x6d0 [ 2463.076301] ? __fget_files+0x296/0x4c0 [ 2463.077147] ? __fget_light+0xea/0x290 [ 2463.077947] __sys_sendmmsg+0x195/0x470 [ 2463.078778] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2463.079677] ? lock_downgrade+0x6d0/0x6d0 [ 2463.080537] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2463.081551] ? wait_for_completion_io+0x270/0x270 [ 2463.082554] ? rcu_read_lock_any_held+0x75/0xa0 [ 2463.083526] ? vfs_write+0x354/0xa70 [ 2463.084312] ? fput_many+0x2f/0x1a0 [ 2463.085073] ? ksys_write+0x1a9/0x260 [ 2463.085863] ? __ia32_sys_read+0xb0/0xb0 [ 2463.086706] __x64_sys_sendmmsg+0x99/0x100 [ 2463.087559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2463.088630] do_syscall_64+0x33/0x40 [ 2463.089403] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2463.090468] RIP: 0033:0x7f70f6d55b19 [ 2463.091233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2463.094997] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2463.096565] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2463.098017] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2463.099458] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2463.100915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2463.102345] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2463.115370] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x5, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:21:42 executing program 3: r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'gre0\x00', {0xf6}, 0x7}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r1, 0x3ad3, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x263, 0x0, 0x2}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000740)=""/138, 0x8a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000100)=0xfffffff8, 0x19) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0xb}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000280)=""/109, 0xa}], 0x2, 0x8, 0x3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) [ 2463.190767] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x6, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2463.287854] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000500002804c000380080002000000000008000200000000000800020000000000080001000000000008000100000000000800010000000000080001000000000008000200000000000800010000000000fc00068004000200ed000300a39900716be0d923660e2e7a311c6880150a98365acc417ac50b1a919d0f62cf2446fc2136878f4179a34fa1bd06f3ec06d43822128aaaaf093d26b67a0b7b48d4533bf15691efc3babc074389cc144804660f55b84dd6404882d85993d8faea2ef22d229b901c44598218c4d941bc8dea3d63ce8f8f90cdef79d3020d29566558984922c73062641b7a9a085fe1398c39e09772cfb359f3af92eb64e8f2ff5ac529f5621011da7001aae513ca0f3dfce4579ac986cce1a3d71dcc1f879d4bf347f860181e20d12017e31143cb1b363848e12c1b083abca4f859c005452e48a6d6d00509f7195b214800000004000200092db1f0282cba9f5e78639000f38b748a3a17ecff92427e481550539d07f4f54c6555935dd9c1c3c4ca397abcd8"], 0x160}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=@orangefs={0x14, 0x1, {"b987d29d224865f720f0a53660f90fca", 0xfffffff9}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000002100210c000000000000000002"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, 0x0, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0xa4, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9607}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4caa}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x20040480) 14:21:57 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x139143, 0xcf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x0, 0x4, 0x53, 0x3, 0x3, 0x7fff, 0x2a6, 0x40, 0x2d2, 0x2, 0x8001, 0x38, 0x2, 0x7, 0x0, 0x8}, [{0x1, 0x1, 0x4000800, 0x0, 0x6, 0xffffffffffffffff, 0x480000000000000, 0x200}, {0x6, 0x20, 0xfff, 0x3f, 0x3, 0xf50b, 0x6, 0x1}], "de9c5620c37d18d5382b8b15a705d09288134113ca9a30a42564e53d55d25e294cb6a5e5763871282e83d7340f0287f13c040fe68344366c2963ac58d87b0c04cb2e2b07d76166e207dc4674d66551146557e40b735e25ce1e62cf97a6197dfa800c0a5b8e3fa23a27a3a258fe49a13826d921cf8506028aa2fd62", ['\x00']}, 0x22b) sendfile(r0, r1, 0x0, 0x100000001) openat(r1, &(0x7f0000000040)='./file1\x00', 0xe240, 0x23) 14:21:57 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0xd, 0x0, 0x0, @u32}]}]}, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x90) 14:21:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x7, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:21:57 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 22) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:21:57 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000300)={0xffffff7f, 0x0, 0x9, &(0x7f0000000200)="4ee327a473f665be59"}) openat(0xffffffffffffff9c, &(0x7f0000006440)='./file0\x00', 0x8000, 0xd0) 14:21:57 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) sync_file_range(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x3, 0x24, 0x1, 0x0, 0x0, 0x95, 0x2000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000180), 0x3}, 0x161c6, 0x10001, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0x80000001, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x6d}}, './file0\x00'}) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x77, 0xdd, 0xc1, 0x1, 0x0, 0xe3, 0x8001, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x1c080, 0x3, 0x280, 0x7, 0x7f, 0x7fffffff, 0x7fff, 0x0, 0x2, 0x0, 0x1f}, 0xffffffffffffffff, 0xf, r5, 0x2) 14:21:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @XFRMA_IF_ID={0x8}]}, 0x140}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getae={0x4c, 0x1f, 0x4, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast1, 0x4d3, 0xa, 0xff}, @in6=@mcast2, 0x3ff, 0x3504}, [@mark={0xc, 0x15, {0x35075a, 0x7b9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x805) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x11}, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@newpolicy={0xd4, 0x13, 0x400, 0x70bd28, 0x25dfdbff, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x4e20, 0x100, 0x2, 0x0, 0x80, 0x2, 0x0, r2}, {0x6, 0x278, 0x1, 0x5, 0x7, 0x55}, {0x81, 0x30f97923, 0xfffffffffffffff8, 0x4}, 0x101, 0x6e6bb0, 0x1, 0x0, 0x0, 0x3}, [@policy_type={0xa}, @replay_thresh={0x8, 0xb, 0x40}, @XFRMA_IF_ID={0x8, 0x1f, r5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x200480d5) [ 2478.888791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=19280 comm=syz-executor.6 [ 2478.915678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19280 comm=syz-executor.6 [ 2478.924461] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2478.929427] FAULT_INJECTION: forcing a failure. [ 2478.929427] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.931536] CPU: 1 PID: 19295 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2478.931691] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19280 comm=syz-executor.6 [ 2478.932711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.932718] Call Trace: [ 2478.932739] dump_stack+0x107/0x167 [ 2478.932765] should_fail.cold+0x5/0xa [ 2478.936467] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=19280 comm=syz-executor.6 [ 2478.936910] ? __alloc_skb+0x6d/0x5b0 [ 2478.936931] should_failslab+0x5/0x20 [ 2478.936956] kmem_cache_alloc_node+0x55/0x330 [ 2478.943126] __alloc_skb+0x6d/0x5b0 [ 2478.943810] __ip_append_data+0x2930/0x3310 [ 2478.944580] ? raw_destroy+0x30/0x30 [ 2478.945273] ? ip_finish_output+0x330/0x330 [ 2478.946015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2478.946945] ? ipv4_mtu+0x1ed/0x2c0 [ 2478.947576] ? raw_destroy+0x30/0x30 [ 2478.948249] ip_append_data+0x114/0x1a0 [ 2478.948953] raw_sendmsg+0xaa6/0x29d0 [ 2478.949651] ? dst_output+0x170/0x170 [ 2478.950302] ? __lock_acquire+0x1657/0x5b00 [ 2478.951101] ? perf_trace_lock+0xac/0x490 [ 2478.951841] ? SOFTIRQ_verbose+0x10/0x10 [ 2478.952566] ? create_object.isra.0+0x3ad/0xa20 [ 2478.953403] ? __lockdep_reset_lock+0x180/0x180 [ 2478.954249] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2478.955190] ? find_held_lock+0x2c/0x110 [ 2478.955926] ? trace_hardirqs_on+0x5b/0x180 [ 2478.956702] ? dst_output+0x170/0x170 [ 2478.957386] inet_sendmsg+0x11d/0x140 [ 2478.958066] ? inet_send_prepare+0x540/0x540 [ 2478.958845] __sock_sendmsg+0x13c/0x190 [ 2478.959565] ____sys_sendmsg+0x334/0x870 [ 2478.960308] ? sock_write_iter+0x3d0/0x3d0 [ 2478.961053] ? do_recvmmsg+0x6d0/0x6d0 [ 2478.961760] ? perf_trace_lock+0xac/0x490 [ 2478.962520] ? __lockdep_reset_lock+0x180/0x180 [ 2478.963370] ? perf_trace_lock+0xac/0x490 [ 2478.964113] ___sys_sendmsg+0xf3/0x170 [ 2478.964810] ? sendmsg_copy_msghdr+0x160/0x160 [ 2478.965600] ? lock_downgrade+0x6d0/0x6d0 [ 2478.966349] ? lock_downgrade+0x6d0/0x6d0 [ 2478.967075] ? __fget_files+0x296/0x4c0 [ 2478.967795] ? __fget_light+0xea/0x290 [ 2478.968460] __sys_sendmmsg+0x195/0x470 [ 2478.969166] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2478.969893] ? lock_downgrade+0x6d0/0x6d0 [ 2478.970648] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2478.971480] ? wait_for_completion_io+0x270/0x270 [ 2478.972348] ? rcu_read_lock_any_held+0x75/0xa0 [ 2478.973126] ? vfs_write+0x354/0xa70 [ 2478.973796] ? fput_many+0x2f/0x1a0 [ 2478.974408] ? ksys_write+0x1a9/0x260 [ 2478.975119] ? __ia32_sys_read+0xb0/0xb0 [ 2478.975825] __x64_sys_sendmmsg+0x99/0x100 [ 2478.976587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.977507] do_syscall_64+0x33/0x40 [ 2478.978169] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2478.979104] RIP: 0033:0x7f70f6d55b19 [ 2478.979782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.983085] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2478.984432] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2478.985712] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2478.986978] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.988265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2478.989446] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2479.003082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=19294 comm=syz-executor.4 [ 2479.006023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2479.014477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19294 comm=syz-executor.4 [ 2479.017384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=19290 comm=syz-executor.2 [ 2479.044460] audit: type=1326 audit(138117.941:133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2479.049275] audit: type=1326 audit(138117.941:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2479.064831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19338 comm=syz-executor.4 [ 2479.065455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=19294 comm=syz-executor.4 [ 2479.112818] audit: type=1326 audit(138118.010:135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2479.117908] audit: type=1326 audit(138118.013:136): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 14:21:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x8, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:21:58 executing program 6: syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @remote}, {0x0, 0x0, 0x8}}}}}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x48c201, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x8848}, @void, @ipv6=@gre_packet={0x7, 0x6, "548059", 0x30c, 0x2f, 0xff, @local, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x3c, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7f, 0x2, [0x4, 0xfffffffffffffffc, 0x9, 0x8000, 0xa]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @pad1, @hao={0xc9, 0x10, @local}, @pad1, @jumbo={0xc2, 0x4, 0x14c}, @jumbo={0xc2, 0x4, 0x8001}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x98, 0x2, [0x1ff, 0xffff], "5d0179d1a87f989254c2560397a497475fd650e60f72d2fe21af280803677b0248dc05a1d7983a541e2c6ca224bc864bdb38044731a1ca32556f2437b20dff9b0f9b382021762b7e779f4719161b629da3f990658e727b439ce2152fd019c181a2e2234fc62fb6244bc3a94abce188ddb44f6c442f2545276e5ad961a42da8eab15d907af8b5a7e17d78831b152ae773aca4211821746d4b"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x8], "94ae34726204c84b8fa930179c0554427623c395c454689f3079599728dec79b853683cfadff9a095b082495a335246a6171408ce7e490aa58a8464eef1b063551a7decaa249b562b32da1814dfab0546b397138b2b20f6223769504b4f3a221536cc611c196024f1706e55187bd20d3c65c2c8a3cc553b50a0849abf925116caa5a16a1e666e76cca470e"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x0], "d3f89c37fdd6d7570da03baef467025edd6c0afbb1b1133235cfabb9ac3567ffdc1e805023f01acb32f6e233d96f7feac5d6c4b8c943a0bccbf1051a9a7cf71d8acda4ed3e6cee36187dc4ecdfcb669ca6d5fd6b96b6bf5b81c0d9e34286350c1ac749eab7b4f5d785c899a39d0d4f146ae4b08c0d116eb16481b7982098a9ce1374b68b5d51b9e324ef0590ac3952f2108fcc8b27c196a9a33d94c669ee9ed43d83b2e7d9d3e702bf447fff3a106bedeb8a6d0fd1a05328f44603773177397e7499ba3b87386bd7781d42dd012a496a68f0ce655d0aa1f35496f8b1d3b8c378c9bac9ad"}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x8, 0x0, 0x0, 0x2, 0x2, 0x8}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x4, 0x1, 0x0, 0x0, 0x7, 0x6}, 0x2, {0x7648, 0x9db9, 0x3, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "130c940171d760627ce810e23c745992520b656fb69c5a4f3314289b915f76f5f12e0f7967e4ca979caab1c45ac6605b8698a14158a99194349b6a91ab08ee"}}}}}, 0x338) [ 2479.164623] audit: type=1326 audit(138118.013:137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2479.172914] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r1, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x7fff, 0x6, 0x8, 0xffff, 0xffff8001, 0x10001, 0x8}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, r6) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) [ 2479.176725] audit: type=1326 audit(138118.013:138): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2479.204848] audit: type=1326 audit(138118.013:139): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 14:21:58 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 23) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2479.224706] audit: type=1326 audit(138118.013:140): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 14:21:58 executing program 2: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)="80", 0x1, 0xc}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x0, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r7}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x40, 0x1000, 0x0, {0x0, r7}}, 0xffffffff) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2479.251738] audit: type=1326 audit(138118.014:141): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 14:21:58 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) sync_file_range(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x3, 0x24, 0x1, 0x0, 0x0, 0x95, 0x2000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000180), 0x3}, 0x161c6, 0x10001, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0x80000001, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x6d}}, './file0\x00'}) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x77, 0xdd, 0xc1, 0x1, 0x0, 0xe3, 0x8001, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x1c080, 0x3, 0x280, 0x7, 0x7f, 0x7fffffff, 0x7fff, 0x0, 0x2, 0x0, 0x1f}, 0xffffffffffffffff, 0xf, r5, 0x2) [ 2479.270322] audit: type=1326 audit(138118.014:142): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19285 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2479.287736] FAULT_INJECTION: forcing a failure. [ 2479.287736] name failslab, interval 1, probability 0, space 0, times 0 [ 2479.290281] CPU: 0 PID: 19413 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2479.291806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2479.293623] Call Trace: [ 2479.294212] dump_stack+0x107/0x167 [ 2479.295046] should_fail.cold+0x5/0xa [ 2479.295873] ? create_object.isra.0+0x3a/0xa20 [ 2479.296889] should_failslab+0x5/0x20 [ 2479.297743] kmem_cache_alloc+0x5b/0x310 [ 2479.298652] create_object.isra.0+0x3a/0xa20 [ 2479.299633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2479.300758] kmem_cache_alloc_node+0x169/0x330 [ 2479.301773] __alloc_skb+0x6d/0x5b0 [ 2479.302581] __ip_append_data+0x2930/0x3310 [ 2479.303564] ? raw_destroy+0x30/0x30 [ 2479.304401] ? ip_finish_output+0x330/0x330 [ 2479.305348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2479.306516] ? ipv4_mtu+0x1ed/0x2c0 [ 2479.307351] ? raw_destroy+0x30/0x30 [ 2479.308172] ip_append_data+0x114/0x1a0 [ 2479.309052] raw_sendmsg+0xaa6/0x29d0 [ 2479.309901] ? dst_output+0x170/0x170 [ 2479.310752] ? __lock_acquire+0x1657/0x5b00 [ 2479.311741] ? perf_trace_lock+0xac/0x490 [ 2479.312674] ? SOFTIRQ_verbose+0x10/0x10 [ 2479.313566] ? create_object.isra.0+0x3ad/0xa20 [ 2479.314780] ? __lockdep_reset_lock+0x180/0x180 [ 2479.316043] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2479.317399] ? find_held_lock+0x2c/0x110 [ 2479.318504] ? trace_hardirqs_on+0x5b/0x180 [ 2479.319677] ? dst_output+0x170/0x170 [ 2479.320593] inet_sendmsg+0x11d/0x140 [ 2479.321474] ? inet_send_prepare+0x540/0x540 [ 2479.322445] __sock_sendmsg+0x13c/0x190 [ 2479.323357] ____sys_sendmsg+0x334/0x870 [ 2479.324251] ? sock_write_iter+0x3d0/0x3d0 [ 2479.325176] ? do_recvmmsg+0x6d0/0x6d0 [ 2479.326036] ? perf_trace_lock+0xac/0x490 [ 2479.326969] ? __lockdep_reset_lock+0x180/0x180 [ 2479.328002] ? perf_trace_lock+0xac/0x490 [ 2479.328926] ___sys_sendmsg+0xf3/0x170 [ 2479.329795] ? sendmsg_copy_msghdr+0x160/0x160 [ 2479.330830] ? lock_downgrade+0x6d0/0x6d0 [ 2479.331756] ? lock_downgrade+0x6d0/0x6d0 [ 2479.332694] ? __fget_files+0x296/0x4c0 [ 2479.333595] ? __fget_light+0xea/0x290 [ 2479.334462] __sys_sendmmsg+0x195/0x470 [ 2479.335366] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2479.336320] ? lock_downgrade+0x6d0/0x6d0 [ 2479.337311] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2479.338373] ? wait_for_completion_io+0x270/0x270 [ 2479.339463] ? rcu_read_lock_any_held+0x75/0xa0 [ 2479.340490] ? vfs_write+0x354/0xa70 [ 2479.341311] ? fput_many+0x2f/0x1a0 [ 2479.342120] ? ksys_write+0x1a9/0x260 [ 2479.342972] ? __ia32_sys_read+0xb0/0xb0 [ 2479.343865] __x64_sys_sendmmsg+0x99/0x100 [ 2479.344807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2479.345950] do_syscall_64+0x33/0x40 [ 2479.346795] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2479.347918] RIP: 0033:0x7f70f6d55b19 [ 2479.348752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2479.352807] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2479.354522] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2479.356136] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2479.357716] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2479.359332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2479.360949] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:21:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x9, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2479.380080] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r2, &(0x7f0000001380)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6000201}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x12c, 0x23, 0x400, 0x70bd29, 0x25dfdbff, {0x1c}, [@nested={0x6c, 0x73, 0x0, 0x1, [@typed={0x61, 0x5, 0x0, 0x0, @binary="20e6c8cf67caf3c613690a4b705b18becfb769312c1627e9beb8d0a8a569a40d4a84989a9db38694956f7707c7b42bbc7d17534d783e2f1b93b6956d994e565b3772eba98c1c6983fa154f9bb4a7a7c524199023af179cd9ef5c823579"}, @typed={0x4, 0x50}]}, @nested={0x14, 0x39, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x8a, 0x0, 0x0, @u32=0x1}]}, @nested={0x14, 0x1f, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x74, 0x0, 0x0, @uid=r2}]}, @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x5e, 0x0, 0x0, @uid=r3}, @typed={0x5, 0x37, 0x0, 0x0, @str='\x00'}, @generic="e408cfc0744ee8850dd9102977205039d9cb3f5ce6bb3f088e1da1a22ffe20ca562e2558f58e510afff0cce746f9bbad1bb52cf7770f56b0c58bd958d13a7d5c6fe2be88ed5c5ec8c16eab60ebcb30d27d5e559e68531c5e13bcf9dd9aae96d4"]}, 0x12c}, 0x1, 0x0, 0x0, 0x200088a0}, 0x10) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000100)="e86bdc95657e", 0x6}], 0x1) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 14:21:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xa, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2479.454861] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:21:58 executing program 3: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100ec0001000000181d1a", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000100ffffffff2e2f66696c653000"]) openat(r0, &(0x7f0000000280)='./file0\x00', 0x54983, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000740)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6ae, 0x0, 0x0, 0x1200000, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200), 0x18) getuid() setxattr$incfs_id(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r1, &(0x7f0000001380)) ioprio_set$uid(0x0, r1, 0x7) umount2(0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a000600080211000000000008003500fc"], 0x44}}, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="611fd94af8cbca8f839700c853697eb6f787b2815884b7c3757c50eec3c6f9ea956d3ecf0746c7790c91a1f7b8baaf1272c4df319718050a561733a1e66d7afb76f522062b43808101af90626f091a4102f4095e566baede3bb9fd75ca7d8497f296a5774e1b502c69c07c3d4b0ea0ed6860cf02b184af2a4c50b3de", 0x7c) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x5d, 0x1, &(0x7f0000000580)=[{&(0x7f00000002c0)="635c216de97f95c1925f8076ddbe4dd34d1e927fd030502df1e723bf0039f395179e2eeb7219b509a380a00ca1b3e4cf0fff10e8fe80621d9fafd54077078faf0ad438d29c8ba96d8a6fad6bd5d4c11daca1062ed864b8a4de7c2963e97fbf480be9f006139f3d76185def1cbf4babf867022754a2221c9dd2533db11ce60bb1127cd9b881e870809a4dd5d82c8870a169d959913460248d3ced4024d77600928ed0b3b85665faa07e74ce6af947b70102207818b88fad5e765db3f5bbed33eca3bac91ed114be0740a651be9c330c74b0b163ea49c99bc4daf49173c1ccbbefdf", 0xe1, 0x2}], 0x80000, &(0x7f00000005c0)={[{@fat=@debug}, {@dots}, {@dots}, {@nodots}], [{@obj_user={'obj_user', 0x3d, '('}}]}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000240)=0x6) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) accept$inet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, @remote}, &(0x7f0000000780)=0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x2) [ 2479.524337] nfs: Unknown parameter '0000000000000000000000000000000' 14:21:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xf, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:21:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0xff) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) connect$inet(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getrandom(0x0, 0x0, 0x0) shutdown(r0, 0x1) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x198c, 0x8, 0x2, 0xae}, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005800)=0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0x7, 0x8000}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x2c1) unshare(0x48020200) [ 2479.546581] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2479.585156] nfs: Unknown parameter '0000000000000000000000000000000' [ 2496.876674] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:22:15 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 24) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:15 executing program 2: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)="80", 0x1, 0xc}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x0, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r7}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x40, 0x1000, 0x0, {0x0, r7}}, 0xffffffff) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 14:22:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x48, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:22:15 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a30c23ed49692a1764e2b0bf1aef0c24952d4d2aa995b929d3bfefb4f3339ab4f0ca89cf70a2c24797093569ed9ab8675be7ddf15723c5683e65b91f59e0da2ceacda86086320c6132e7c7d0683381f6335864d7cf1a167cc2984e2937feea242"], 0x4) shutdown(r5, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) 14:22:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10088, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0xa01d, 0x20, 0x1, 0x3df, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[@ANYBLOB="e6023600410008004b33fec0cefcedcc64456dc3026fc7270300a28ce2d10d69c19cc92a89e0e8006ce92d1ea02d49bcf41c21e99e30bd00ab"], 0x54, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup2(r3, r3) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x486b, &(0x7f00000001c0)={0x0, 0xec38, 0x1, 0x1, 0x2ff}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000240), &(0x7f0000000300)) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r6}}, 0x40) syz_io_uring_submit(0x0, r1, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x1}, 0x0, {0x0, r6}}, 0x5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) 14:22:15 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000300)={0xffffff7f, 0x0, 0x9, &(0x7f0000000200)="4ee327a473f665be59"}) 14:22:15 executing program 1: r0 = syz_io_uring_setup(0x4c9f, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x5, 0x39, 0x1}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7cae, &(0x7f0000001080)={0x0, 0x8fbb, 0x8, 0x0, 0x19c, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001100), &(0x7f0000001140)=0x0) clone3(&(0x7f00000005c0)={0x88027000, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), {0x38}, &(0x7f0000000440)=""/38, 0x26, &(0x7f0000000500)=""/120, &(0x7f0000000480)=[0x0], 0x1}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, 0xffffffffffffffff, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x0, 0x0, r7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r9}}, 0x40) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r9}}, 0xfffffffc) 14:22:15 executing program 6: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$revoke(0x3, r2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)={0x2, 0x0, @c}, 0x29, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r3}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r1) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1bc4451e1f202122232425262728292a2b32333435363723c8081953e7c5383b3a3b3c3d3e3f40000000000000"], 0x48, r0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2496.912842] FAULT_INJECTION: forcing a failure. [ 2496.912842] name failslab, interval 1, probability 0, space 0, times 0 [ 2496.915452] CPU: 0 PID: 20459 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2496.916976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.918778] Call Trace: [ 2496.919379] dump_stack+0x107/0x167 [ 2496.920193] should_fail.cold+0x5/0xa [ 2496.921057] should_failslab+0x5/0x20 [ 2496.921904] __kmalloc_node_track_caller+0x74/0x3b0 [ 2496.922993] ? __ip_append_data+0x2930/0x3310 [ 2496.923985] __alloc_skb+0xb1/0x5b0 [ 2496.924785] __ip_append_data+0x2930/0x3310 [ 2496.925743] ? raw_destroy+0x30/0x30 [ 2496.926568] ? ip_finish_output+0x330/0x330 [ 2496.927537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2496.928643] ? ipv4_mtu+0x1ed/0x2c0 [ 2496.929441] ? raw_destroy+0x30/0x30 [ 2496.930251] ip_append_data+0x114/0x1a0 [ 2496.931140] raw_sendmsg+0xaa6/0x29d0 [ 2496.931992] ? dst_output+0x170/0x170 [ 2496.932252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2496.932820] ? __lock_acquire+0x1657/0x5b00 [ 2496.932863] ? perf_trace_lock+0xac/0x490 [ 2496.932881] ? SOFTIRQ_verbose+0x10/0x10 [ 2496.932900] ? create_object.isra.0+0x3ad/0xa20 [ 2496.932923] ? __lockdep_reset_lock+0x180/0x180 [ 2496.932960] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2496.932977] ? find_held_lock+0x2c/0x110 [ 2496.933016] ? trace_hardirqs_on+0x5b/0x180 [ 2496.933041] ? dst_output+0x170/0x170 [ 2496.933063] inet_sendmsg+0x11d/0x140 [ 2496.933082] ? inet_send_prepare+0x540/0x540 [ 2496.933100] __sock_sendmsg+0x13c/0x190 [ 2496.933121] ____sys_sendmsg+0x334/0x870 [ 2496.933145] ? sock_write_iter+0x3d0/0x3d0 [ 2496.933162] ? do_recvmmsg+0x6d0/0x6d0 [ 2496.933181] ? perf_trace_lock+0xac/0x490 [ 2496.933209] ? __lockdep_reset_lock+0x180/0x180 [ 2496.933227] ? perf_trace_lock+0xac/0x490 [ 2496.933254] ___sys_sendmsg+0xf3/0x170 [ 2496.933278] ? sendmsg_copy_msghdr+0x160/0x160 [ 2496.933306] ? lock_downgrade+0x6d0/0x6d0 [ 2496.933336] ? lock_downgrade+0x6d0/0x6d0 [ 2496.933364] ? __fget_files+0x296/0x4c0 [ 2496.955335] ? __fget_light+0xea/0x290 [ 2496.956206] __sys_sendmmsg+0x195/0x470 [ 2496.957096] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2496.958065] ? lock_downgrade+0x6d0/0x6d0 [ 2496.959003] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2496.960065] ? wait_for_completion_io+0x270/0x270 [ 2496.961139] ? rcu_read_lock_any_held+0x75/0xa0 [ 2496.962150] ? vfs_write+0x354/0xa70 [ 2496.962968] ? fput_many+0x2f/0x1a0 [ 2496.963763] ? ksys_write+0x1a9/0x260 [ 2496.964600] ? __ia32_sys_read+0xb0/0xb0 [ 2496.965498] __x64_sys_sendmmsg+0x99/0x100 [ 2496.966425] do_syscall_64+0x33/0x40 [ 2496.967261] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2496.968428] RIP: 0033:0x7f70f6d55b19 [ 2496.969247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.973297] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2496.974985] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2496.976544] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2496.978092] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2496.979669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2496.981222] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:22:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x4c, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:22:15 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 25) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:15 executing program 2: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)="80", 0x1, 0xc}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x0, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r7}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x40, 0x1000, 0x0, {0x0, r7}}, 0xffffffff) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 2497.107446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2497.151626] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2497.169980] FAULT_INJECTION: forcing a failure. [ 2497.169980] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.171320] CPU: 1 PID: 20580 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2497.172096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.173020] Call Trace: [ 2497.173324] dump_stack+0x107/0x167 [ 2497.173741] should_fail.cold+0x5/0xa [ 2497.174174] ? create_object.isra.0+0x3a/0xa20 [ 2497.174691] should_failslab+0x5/0x20 [ 2497.175140] kmem_cache_alloc+0x5b/0x310 [ 2497.175612] create_object.isra.0+0x3a/0xa20 [ 2497.176115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.176688] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2497.177254] ? __ip_append_data+0x2930/0x3310 [ 2497.177769] __alloc_skb+0xb1/0x5b0 [ 2497.178187] __ip_append_data+0x2930/0x3310 [ 2497.178698] ? raw_destroy+0x30/0x30 [ 2497.179164] ? ip_finish_output+0x330/0x330 [ 2497.179675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.180253] ? ipv4_mtu+0x1ed/0x2c0 [ 2497.180690] ? raw_destroy+0x30/0x30 [ 2497.181126] ip_append_data+0x114/0x1a0 [ 2497.181602] raw_sendmsg+0xaa6/0x29d0 [ 2497.182062] ? dst_output+0x170/0x170 [ 2497.182512] ? __lock_acquire+0x1657/0x5b00 [ 2497.183026] ? perf_trace_lock+0xac/0x490 [ 2497.183515] ? SOFTIRQ_verbose+0x10/0x10 [ 2497.183993] ? create_object.isra.0+0x3ad/0xa20 [ 2497.184526] ? __lockdep_reset_lock+0x180/0x180 [ 2497.185087] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2497.185697] ? find_held_lock+0x2c/0x110 [ 2497.186158] ? trace_hardirqs_on+0x5b/0x180 [ 2497.186655] ? dst_output+0x170/0x170 [ 2497.187098] inet_sendmsg+0x11d/0x140 [ 2497.187533] ? inet_send_prepare+0x540/0x540 [ 2497.188028] __sock_sendmsg+0x13c/0x190 [ 2497.188474] ____sys_sendmsg+0x334/0x870 [ 2497.188960] ? sock_write_iter+0x3d0/0x3d0 [ 2497.189455] ? do_recvmmsg+0x6d0/0x6d0 [ 2497.189916] ? perf_trace_lock+0xac/0x490 [ 2497.190406] ? __lockdep_reset_lock+0x180/0x180 [ 2497.190954] ? perf_trace_lock+0xac/0x490 [ 2497.191445] ___sys_sendmsg+0xf3/0x170 [ 2497.191907] ? sendmsg_copy_msghdr+0x160/0x160 [ 2497.192439] ? lock_downgrade+0x6d0/0x6d0 [ 2497.192932] ? lock_downgrade+0x6d0/0x6d0 [ 2497.193412] ? __fget_files+0x296/0x4c0 [ 2497.193891] ? __fget_light+0xea/0x290 [ 2497.194352] __sys_sendmmsg+0x195/0x470 14:22:16 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a30c23ed49692a1764e2b0bf1aef0c24952d4d2aa995b929d3bfefb4f3339ab4f0ca89cf70a2c24797093569ed9ab8675be7ddf15723c5683e65b91f59e0da2ceacda86086320c6132e7c7d0683381f6335864d7cf1a167cc2984e2937feea242"], 0x4) shutdown(r5, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) [ 2497.194817] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2497.195552] ? lock_downgrade+0x6d0/0x6d0 [ 2497.196050] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2497.196613] ? wait_for_completion_io+0x270/0x270 [ 2497.197166] ? rcu_read_lock_any_held+0x75/0xa0 [ 2497.197707] ? vfs_write+0x354/0xa70 [ 2497.198138] ? fput_many+0x2f/0x1a0 [ 2497.198557] ? ksys_write+0x1a9/0x260 [ 2497.199030] ? __ia32_sys_read+0xb0/0xb0 [ 2497.199510] __x64_sys_sendmmsg+0x99/0x100 [ 2497.200002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.200607] do_syscall_64+0x33/0x40 [ 2497.201043] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2497.201634] RIP: 0033:0x7f70f6d55b19 [ 2497.202063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.204194] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2497.205076] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2497.205874] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2497.206671] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.207490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.208315] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:22:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x60, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2497.315003] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:22:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) fcntl$addseals(r0, 0x409, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) ftruncate(r0, 0x0) [ 2497.357523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x68, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:22:16 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a30c23ed49692a1764e2b0bf1aef0c24952d4d2aa995b929d3bfefb4f3339ab4f0ca89cf70a2c24797093569ed9ab8675be7ddf15723c5683e65b91f59e0da2ceacda86086320c6132e7c7d0683381f6335864d7cf1a167cc2984e2937feea242"], 0x4) shutdown(r5, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) [ 2497.458284] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:22:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) fcntl$addseals(r0, 0x409, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) ftruncate(r0, 0x0) 14:22:16 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 26) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2497.518562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x6c, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2497.582306] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2497.585595] FAULT_INJECTION: forcing a failure. [ 2497.585595] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.588256] CPU: 0 PID: 21130 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2497.589766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.591585] Call Trace: [ 2497.592160] dump_stack+0x107/0x167 [ 2497.592959] should_fail.cold+0x5/0xa [ 2497.593794] ? __alloc_skb+0x6d/0x5b0 [ 2497.594625] should_failslab+0x5/0x20 [ 2497.595472] kmem_cache_alloc_node+0x55/0x330 [ 2497.596443] __alloc_skb+0x6d/0x5b0 [ 2497.597245] __ip_append_data+0x2930/0x3310 [ 2497.598199] ? raw_destroy+0x30/0x30 [ 2497.599028] ? ip_finish_output+0x330/0x330 [ 2497.599955] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.601050] ? ipv4_mtu+0x1ed/0x2c0 [ 2497.601850] ? raw_destroy+0x30/0x30 [ 2497.602651] ip_append_data+0x114/0x1a0 [ 2497.603536] raw_sendmsg+0xaa6/0x29d0 [ 2497.604391] ? dst_output+0x170/0x170 [ 2497.605218] ? __lock_acquire+0x1657/0x5b00 [ 2497.606174] ? perf_trace_lock+0xac/0x490 [ 2497.607095] ? SOFTIRQ_verbose+0x10/0x10 [ 2497.607985] ? create_object.isra.0+0x3ad/0xa20 [ 2497.609014] ? __lockdep_reset_lock+0x180/0x180 [ 2497.610041] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2497.611165] ? find_held_lock+0x2c/0x110 [ 2497.612078] ? trace_hardirqs_on+0x5b/0x180 [ 2497.613028] ? dst_output+0x170/0x170 [ 2497.613862] inet_sendmsg+0x11d/0x140 [ 2497.614689] ? inet_send_prepare+0x540/0x540 [ 2497.615667] __sock_sendmsg+0x13c/0x190 [ 2497.616547] ____sys_sendmsg+0x334/0x870 [ 2497.617432] ? sock_write_iter+0x3d0/0x3d0 [ 2497.618338] ? do_recvmmsg+0x6d0/0x6d0 [ 2497.619214] ? perf_trace_lock+0xac/0x490 [ 2497.620130] ? __lockdep_reset_lock+0x180/0x180 [ 2497.621147] ? perf_trace_lock+0xac/0x490 [ 2497.622054] ___sys_sendmsg+0xf3/0x170 [ 2497.622904] ? sendmsg_copy_msghdr+0x160/0x160 [ 2497.623907] ? lock_downgrade+0x6d0/0x6d0 [ 2497.624834] ? lock_downgrade+0x6d0/0x6d0 [ 2497.625730] ? __fget_files+0x296/0x4c0 [ 2497.626595] ? __fget_light+0xea/0x290 [ 2497.627467] __sys_sendmmsg+0x195/0x470 [ 2497.628334] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2497.629268] ? lock_downgrade+0x6d0/0x6d0 [ 2497.630206] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2497.631293] ? wait_for_completion_io+0x270/0x270 [ 2497.632327] ? rcu_read_lock_any_held+0x75/0xa0 [ 2497.633322] ? vfs_write+0x354/0xa70 [ 2497.634131] ? fput_many+0x2f/0x1a0 [ 2497.634928] ? ksys_write+0x1a9/0x260 [ 2497.635799] ? __ia32_sys_read+0xb0/0xb0 [ 2497.636699] __x64_sys_sendmmsg+0x99/0x100 [ 2497.637625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.638747] do_syscall_64+0x33/0x40 [ 2497.639570] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2497.640705] RIP: 0033:0x7f70f6d55b19 [ 2497.641519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.645529] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2497.647186] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2497.648728] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2497.650297] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 14:22:16 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xa600, 0x112) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000001c0)=""/90, 0x5a}], 0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x5603, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r3, 0x5608) 14:22:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x74, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2497.652173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.652186] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2497.660533] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:22:30 executing program 2: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f00000002c0)="80", 0x1, 0xc}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x44, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x0, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r7}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x40, 0x1000, 0x0, {0x0, r7}}, 0xffffffff) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 14:22:30 executing program 6: ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000000c0)={0x649, 0x7fff, 0x1, 0x0, 0x0, [{{}, 0x9}]}) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) read(r1, &(0x7f0000000500)=""/4096, 0x1000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x3c8d, 0x4e98, 0x3, &(0x7f0000000080)={[0x45c1]}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000140)={r0, 0x6, 0xf0, 0x1}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x4, 0x2, 0x0, 0x0) 14:22:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x74, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:22:30 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a30c23ed49692a1764e2b0bf1aef0c24952d4d2aa995b929d3bfefb4f3339ab4f0ca89cf70a2c24797093569ed9ab8675be7ddf15723c5683e65b91f59e0da2ceacda86086320c6132e7c7d0683381f6335864d7cf1a167cc2984e2937feea242"], 0x4) shutdown(r5, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) 14:22:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x7a, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:22:30 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/mcfilter6\x00') preadv(r1, &(0x7f00000023c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x0, 0x0) 14:22:30 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) 14:22:30 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 27) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2511.912091] FAULT_INJECTION: forcing a failure. [ 2511.912091] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.913811] CPU: 0 PID: 21635 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2511.914819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.916056] Call Trace: [ 2511.916444] dump_stack+0x107/0x167 [ 2511.916984] should_fail.cold+0x5/0xa [ 2511.917559] ? create_object.isra.0+0x3a/0xa20 [ 2511.918231] should_failslab+0x5/0x20 [ 2511.918800] kmem_cache_alloc+0x5b/0x310 [ 2511.919418] create_object.isra.0+0x3a/0xa20 [ 2511.920065] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2511.920812] kmem_cache_alloc_node+0x169/0x330 [ 2511.921486] __alloc_skb+0x6d/0x5b0 [ 2511.922008] __ip_append_data+0x2930/0x3310 [ 2511.922656] ? raw_destroy+0x30/0x30 [ 2511.923219] ? ip_finish_output+0x330/0x330 [ 2511.923851] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2511.924592] ? ipv4_mtu+0x1ed/0x2c0 [ 2511.925130] ? raw_destroy+0x30/0x30 [ 2511.925673] ip_append_data+0x114/0x1a0 [ 2511.926263] raw_sendmsg+0xaa6/0x29d0 [ 2511.926831] ? dst_output+0x170/0x170 [ 2511.927400] ? __lock_acquire+0x1657/0x5b00 [ 2511.928039] ? perf_trace_lock+0xac/0x490 [ 2511.928646] ? SOFTIRQ_verbose+0x10/0x10 [ 2511.929235] ? create_object.isra.0+0x3ad/0xa20 [ 2511.929915] ? __lockdep_reset_lock+0x180/0x180 [ 2511.930601] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2511.931365] ? find_held_lock+0x2c/0x110 [ 2511.931972] ? trace_hardirqs_on+0x5b/0x180 [ 2511.932605] ? dst_output+0x170/0x170 [ 2511.933158] inet_sendmsg+0x11d/0x140 [ 2511.933711] ? inet_send_prepare+0x540/0x540 [ 2511.934328] __sock_sendmsg+0x13c/0x190 [ 2511.934910] ____sys_sendmsg+0x334/0x870 [ 2511.935493] ? sock_write_iter+0x3d0/0x3d0 [ 2511.936110] ? do_recvmmsg+0x6d0/0x6d0 [ 2511.936678] ? perf_trace_lock+0xac/0x490 [ 2511.937283] ? __lockdep_reset_lock+0x180/0x180 [ 2511.937955] ? perf_trace_lock+0xac/0x490 [ 2511.938564] ___sys_sendmsg+0xf3/0x170 [ 2511.939141] ? sendmsg_copy_msghdr+0x160/0x160 [ 2511.939815] ? lock_downgrade+0x6d0/0x6d0 [ 2511.940424] ? lock_downgrade+0x6d0/0x6d0 [ 2511.941034] ? __fget_files+0x296/0x4c0 [ 2511.941625] ? __fget_light+0xea/0x290 [ 2511.942200] __sys_sendmmsg+0x195/0x470 [ 2511.942783] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2511.943418] ? lock_downgrade+0x6d0/0x6d0 [ 2511.944034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2511.944747] ? wait_for_completion_io+0x270/0x270 [ 2511.945447] ? rcu_read_lock_any_held+0x75/0xa0 [ 2511.946121] ? vfs_write+0x354/0xa70 [ 2511.946665] ? fput_many+0x2f/0x1a0 [ 2511.947212] ? ksys_write+0x1a9/0x260 [ 2511.947763] ? __ia32_sys_read+0xb0/0xb0 [ 2511.948358] __x64_sys_sendmmsg+0x99/0x100 [ 2511.948967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.949713] do_syscall_64+0x33/0x40 [ 2511.950251] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2511.950993] RIP: 0033:0x7f70f6d55b19 [ 2511.951548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.954205] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2511.955331] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2511.956370] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2511.957404] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.958439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2511.959488] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2511.971029] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2511.980463] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2511.992455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:46 executing program 1: lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(0xffffffffffffffff, 0x2025, 0x6b6, 0x3, &(0x7f0000000040)={[0x10001]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) ioctl$CDROM_SELECT_SPEED(r2, 0x5322, 0x46c7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000004a00110000000000001900000a00000fd4b72f2159478dcb713f7c5c3fcd69da3f6e95200e9109a67955c96f191941d05711613f2884ac5ba5eb9c5ca9353a5dae8e441f312f66bb39185135955a775527bb8c6c045c02cd6a6365278e781cbfef9b07"], 0x1c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) io_submit(r3, 0x6, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f00000004c0)="2788e8e5b11cb9f37dbf496923ffce28538bccd9065f9f45709041f5733d390e75728cd13ad6fe32095cd2ee7e308a0e94424dcc2bf4609fc099057553be5ee6139e346d95179fc09296f013c166a9fe791b02e19d5c3e6a3bee91f0a65cfecbe99f3c66e1206056d2a9a383fae2b1be1193bf7a2d842f1a05eb9fc482ee6382625036d5e99515d628e5209618724ea31eccf2a0c1ea0f925624c22281c30e6d5a70d6fbcaeae200fad61c2f388d68b940a3ed5e415e4b12151ca97b111e2518a2e9d7ba8c255101526ee283bb64ee45d7cb5373eff0", 0xd6, 0x4d, 0x0, 0x1, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000001e00)="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", 0x1000, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1a, r2, &(0x7f00000005c0)="48d047e6685d4b21f4d1bf7ffc2b3b58df6521f93680f0b5a91dbaa571e4d33cd5935536a2f99da41d9f1fda680797d89473e9a21039e4f07e2150b925307b7600d8fc6bc064c167cc8c0e0a76bb40e4d4f7d6c140868d1482c855b2db8fc903afcd440fd3c8d025c4dff37f580a38bf310b038c4de445dfcd929f3db8439b8bac9aca25cbc7f8a9990eeb32859ca94cbc8b42f33c175d1b1a0f5a743838b0c72c7c9e82be891a67a70e7049714dec0ea54cf1bbf5b6368f3d9d1b7e2db74443176fef518de9dc7d3e105ab4b07415c4436362ce8813", 0xd6, 0x7, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f00000006c0)="9e1069ed504ff33f12b4044bd9c74ba1fd13bea4c4715c9b3f23278f1278e159ca7ee056ef93c094cb1e6a2945e292853f90b4b28d7c4ef7f12f267bf1ec7209fcca09b23d6a8027935cc629a26acddd023c72df067f6243da28fd1d26744b65e3af6295b2aa7e5f48d002ad0306efa10893904976c87d5aa53b5913a253c6ded7ff7fa7879678a460572e6ff438367dde4f2be310a527b9761fb5639710330f57e7a4a6f0c65c1f73a0896119b1aae3d9e714a6b5b2afa0716bad4577ddc9019196e94d46c9c6e11ba9031b7617e50f1e9090ed5a962fc2880e362d23dfb5b0cf4f1a36d0334549f23ed769c2ca44b4fd", 0xf1, 0x100000001, 0x0, 0x0, r4}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x9608829f8985fbba, 0x1, r2, &(0x7f0000000400)="2f9603acc03056d8cfc9fb7418fd42adb161f076c4c50925d1e838ae250acf3e8f0e6a4472a6e43328c8f8eed4f053d3", 0x30, 0x39, 0x0, 0x0, r5}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8, 0x8001, r2, &(0x7f0000000800)="b07dd26241a39d1048cbb0dcaeead8fb8ca07f2931c27ee8476f371e7ccc8722dbf14ce0dc5ab7af02ab02be16cf5e0c8121eaf9a7", 0x35, 0x1000, 0x0, 0x1}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x0, 0x6a, 0x101, 0x10, @mcast2, @remote, 0x10, 0x1, 0x61, 0x6}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1ce6ffff1c00210c0000000016000000060002000800050000000000"], 0x1c}}, 0x0) 14:22:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2, 0x26, 0x3f, 0x8, 0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x7, 0x1f}, 0x1640c, 0x5, 0x0, 0x4, 0x50cd, 0x8, 0x1ff, 0x0, 0x5a, 0x0, 0x1}, r1, 0xd, r2, 0x3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="770ace553f45473ce93fc690209b371c033804eb559e21b897ba58aec06db9d6f112a96615d1bc93244b0fa4a4c44f69e73fc65d8971685e82674bb3bd8a1c586d19933b1ad1add807a5264381b46b28a70151705762b31dbaf04723a1ec7528a6a8b77b02412e9d6aee5cf4b5189eef6193ad25ee478157e12417d23a0c97c96e96fd0e8ddc50beeef131ed6d8eebf0a689a0c5b3c7be9b2678ab5b3fe0878f000fced9ef95f32b859f1fd02d2264e0e247c70bb3c102f71848976e3f2a29139529fd8e92b4c7e4c11c52ed53780bcad8b3f58a8f0ecddbf969e0b50cda560ab24593b043fac38b727b4b82ca664b14"]) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x541a00, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) dup2(0xffffffffffffffff, 0xffffffffffffffff) unshare(0x48020200) 14:22:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xf0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:22:46 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 28) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:22:46 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a30c23ed49692a1764e2b0bf1aef0c24952d4d2aa995b929d3bfefb4f3339ab4f0ca89cf70a2c24797093569ed9ab8675be7ddf15723c5683e65b91f59e0da2ceacda86086320c6132e7c7d0683381f6335864d7cf1a167cc2984e2937feea242"], 0x4) shutdown(r5, 0x1) 14:22:46 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 14:22:46 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x5, 0x0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xffffffff81000239}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x40, 0x2, 0x58, 0x0, 0x8, 0x28001, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x304e, 0x2f96, 0x2, 0x5, 0xfffffffffffffffd, 0x1000, 0x6, 0x0, 0xe6, 0x0, 0x1}, 0x0, 0x2, r2, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x300, 0x100) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) dup2(r3, r1) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) write$binfmt_aout(r4, &(0x7f0000001e00)={{0x21f, 0x2, 0x1f, 0x3e5, 0x118, 0x6e, 0x1ef, 0x8}, "38788fcfee8ee9958cc4bcf350c070031771786a7396740c9a5fcd6564aae52e670797cec3f26d931d0452ee21f89a85a917e23aa0ecde6a854e1e78b9d1d4cc4343ae018a1b3ef89d69235ab46968c612e7eca298a8af708d0f56f8afe77a9e68dc3fff5a87914cfba133d4f2c75d620f63a647d935c69c4f4d57ea782532454ca534273d8fd5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a7) [ 2527.814245] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:22:46 executing program 6: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 2527.848472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2527.849851] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2527.852296] Buffer I/O error on dev sr0, logical block 0, async page read [ 2527.854172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2527.855886] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2527.858296] Buffer I/O error on dev sr0, logical block 1, async page read [ 2527.860165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2527.861546] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2527.863961] Buffer I/O error on dev sr0, logical block 2, async page read [ 2527.865808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2527.867228] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2527.869634] Buffer I/O error on dev sr0, logical block 3, async page read [ 2527.871515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2527.872876] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2527.875262] Buffer I/O error on dev sr0, logical block 4, async page read [ 2527.877122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2527.878488] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2527.880888] Buffer I/O error on dev sr0, logical block 5, async page read [ 2527.882768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2527.884112] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2527.886890] Buffer I/O error on dev sr0, logical block 6, async page read 14:22:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x286, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2527.888778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2527.890613] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2527.893028] Buffer I/O error on dev sr0, logical block 7, async page read [ 2527.912410] FAULT_INJECTION: forcing a failure. [ 2527.912410] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.914142] CPU: 1 PID: 24951 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2527.915067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.916195] Call Trace: [ 2527.916558] dump_stack+0x107/0x167 [ 2527.917053] should_fail.cold+0x5/0xa [ 2527.917578] should_failslab+0x5/0x20 [ 2527.918085] __kmalloc_node_track_caller+0x74/0x3b0 [ 2527.918749] ? __ip_append_data+0x2930/0x3310 [ 2527.919361] __alloc_skb+0xb1/0x5b0 [ 2527.919859] __ip_append_data+0x2930/0x3310 [ 2527.920460] ? raw_destroy+0x30/0x30 [ 2527.920974] ? ip_finish_output+0x330/0x330 [ 2527.921553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2527.922226] ? ipv4_mtu+0x1ed/0x2c0 [ 2527.922714] ? raw_destroy+0x30/0x30 [ 2527.923203] ip_append_data+0x114/0x1a0 [ 2527.923755] raw_sendmsg+0xaa6/0x29d0 [ 2527.924278] ? dst_output+0x170/0x170 [ 2527.924786] ? __lock_acquire+0x1657/0x5b00 [ 2527.925377] ? perf_trace_lock+0xac/0x490 [ 2527.925916] ? SOFTIRQ_verbose+0x10/0x10 [ 2527.926459] ? create_object.isra.0+0x3ad/0xa20 [ 2527.927077] ? __lockdep_reset_lock+0x180/0x180 [ 2527.927706] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2527.928372] ? find_held_lock+0x2c/0x110 [ 2527.928934] ? trace_hardirqs_on+0x5b/0x180 [ 2527.929518] ? dst_output+0x170/0x170 [ 2527.930037] inet_sendmsg+0x11d/0x140 [ 2527.930549] ? inet_send_prepare+0x540/0x540 [ 2527.931140] __sock_sendmsg+0x13c/0x190 [ 2527.931676] ____sys_sendmsg+0x334/0x870 [ 2527.932206] ? sock_write_iter+0x3d0/0x3d0 [ 2527.932752] ? do_recvmmsg+0x6d0/0x6d0 [ 2527.933243] ? perf_trace_lock+0xac/0x490 [ 2527.933781] ? __lockdep_reset_lock+0x180/0x180 [ 2527.934374] ? perf_trace_lock+0xac/0x490 [ 2527.934937] ___sys_sendmsg+0xf3/0x170 [ 2527.935484] ? sendmsg_copy_msghdr+0x160/0x160 [ 2527.936132] ? lock_downgrade+0x6d0/0x6d0 [ 2527.936670] ? lock_downgrade+0x6d0/0x6d0 [ 2527.937215] ? __fget_files+0x296/0x4c0 [ 2527.937739] ? __fget_light+0xea/0x290 [ 2527.938251] __sys_sendmmsg+0x195/0x470 [ 2527.938775] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2527.939338] ? lock_downgrade+0x6d0/0x6d0 [ 2527.939894] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2527.940514] ? wait_for_completion_io+0x270/0x270 [ 2527.941145] ? rcu_read_lock_any_held+0x75/0xa0 [ 2527.941738] ? vfs_write+0x354/0xa70 [ 2527.942227] ? fput_many+0x2f/0x1a0 [ 2527.942696] ? ksys_write+0x1a9/0x260 [ 2527.943186] ? __ia32_sys_read+0xb0/0xb0 [ 2527.943722] __x64_sys_sendmmsg+0x99/0x100 [ 2527.944263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2527.944921] do_syscall_64+0x33/0x40 [ 2527.945403] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2527.946058] RIP: 0033:0x7f70f6d55b19 [ 2527.946533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.948935] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2527.949925] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2527.950827] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2527.951750] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.952692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2527.953616] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2527.984196] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:22:46 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a30c23ed49692a1764e2b0bf1aef0c24952d4d2aa995b929d3bfefb4f3339ab4f0ca89cf70a2c24797093569ed9ab8675be7ddf15723c5683e65b91f59e0da2ceacda86086320c6132e7c7d0683381f6335864d7cf1a167cc2984e2937feea242"], 0x4) shutdown(r5, 0x1) [ 2528.003432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2528.005148] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2528.007322] Buffer I/O error on dev sr0, logical block 0, async page read [ 2528.009184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2528.010411] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2528.012742] Buffer I/O error on dev sr0, logical block 1, async page read [ 2528.014844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2528.016205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2528.017575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2528.018997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2528.020357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2528.021758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 14:22:46 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000500)={0x80945100, 0x0, 0x0, 0x0, {0x23d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r3, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r3, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000004c0)='./file1\x00', 0x7ff, 0x100, 0x1}, 0xcc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) wait4(r1, &(0x7f0000000240), 0x8, &(0x7f0000000280)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x40) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r6, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r6, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfa, 0x7, 0x2, 0x80, 0x0, 0x100, 0x0, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x18204, 0x1, 0x40, 0x6, 0x80000000, 0x1, 0x800, 0x0, 0x2, 0x0, 0x400000000}, 0x0, 0xd, r6, 0x1) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000000)=r0) tgkill(r0, r1, 0x18) pidfd_open(r1, 0x0) 14:22:46 executing program 1: msgctl$IPC_RMID(0x0, 0x0) msgrcv(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) msgsnd(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="b33f56a7df8fc64c9dcddd17d5293b004f5ae6c6b0a75bc1d7a23f80ac25cbbed26ea21733671df108b8e3dc79c230efdf550c034f94dfefcfa75e39302653a7963c8da4612b880f90a706e0643f458bb47529c9efc9bbe2410a75c68b1b77b11112ee5b08f896bff438e3be6905fa97508a1fd5edb0fb9b8ebbd51b335f56f66bb3875d0e1ba64764fee7c9b3260b1e3c5f4c8d74a5b2820d9da9f27491d3ebc3a422c3d0d19058046dc7f5d522e3144434c2f1d8b0d206b9a21206a6d71bd7a03530"], 0x8, 0x0) pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1, 0x1, 0x0, 0xd7, 0x0, 0x6, 0x43c5, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x19e90, 0x7fffffff, 0x80000000, 0x1, 0x20, 0x8, 0x3ff, 0x0, 0x4c, 0x0, 0x1f}, 0xffffffffffffffff, 0xa, r1, 0x0) 14:22:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x300, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2528.139859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2528.174299] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:23:03 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 29) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:03 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x80000001, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x800) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000), 0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x89) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2a, 0x0, 0x70bd25, 0x25dfdbfe, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x3}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$CDROM_GET_CAPABILITY(r6, 0x5331) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:23:03 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:23:03 executing program 3: socketpair(0x2c, 0x4, 0x80, &(0x7f0000000000)={0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)={0x2c, 0x10, 0x409, 0x0, 0x0, {}, [@typed={0x15, 0x0, 0x0, 0x0, @str='\x92\xc7\x82\x19\x8e\xc3\xe6U\x1e\x1b\xd7\x97*\xf6E\x10W'}]}, 0x2c}}, 0x0) 14:23:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x500, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:23:03 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a30c23ed49692a1764e2b0bf1aef0c24952d4d2aa995b929d3bfefb4f3339ab4f0ca89cf70a2c24797093569ed9ab8675be7ddf15723c5683e65b91f59e0da2ceacda86086320c6132e7c7d0683381f6335864d7cf1a167cc2984e2937feea242"], 0x4) 14:23:03 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/34, 0x22) r1 = getuid() syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x100000001, 0x0, &(0x7f0000000180), 0x10, &(0x7f0000000280)={[{@nodots}], [{@smackfshat={'smackfshat', 0x3d, '`}:*)&\'%'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x30, 0x39, 0x32, 0x63, 0x66, 0x65], 0x2d, [0x34, 0x66, 0x36, 0x35], 0x2d, [0x34, 0x39, 0x61, 0x64], 0x2d, [0x34, 0x65, 0x38, 0x31], 0x2d, [0x33, 0x61, 0x32, 0x32, 0x34, 0x33, 0x67, 0x33]}}}, {@appraise}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}]}) getdents64(r0, &(0x7f00000000c0)=""/48, 0x30) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x6, 0x0, 0x1000000) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x7fffffff, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000086dd6096153f00303a00fc0200000000000000000000ff02000000"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffdfd, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x228, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001080)={'veth0_macvtap\x00'}) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x5) 14:23:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(r0, &(0x7f0000001540)='totmaps\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000014c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x8, 0x1, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x8) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) [ 2544.186197] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2544.251441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2544.253998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2544.278690] FAULT_INJECTION: forcing a failure. [ 2544.278690] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.281301] CPU: 0 PID: 25097 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2544.282785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.284582] Call Trace: [ 2544.285151] dump_stack+0x107/0x167 [ 2544.285950] should_fail.cold+0x5/0xa [ 2544.286778] should_failslab+0x5/0x20 [ 2544.287608] __kmalloc_node_track_caller+0x74/0x3b0 [ 2544.288689] ? __ip_append_data+0x2930/0x3310 [ 2544.289675] __alloc_skb+0xb1/0x5b0 [ 2544.290475] __ip_append_data+0x2930/0x3310 [ 2544.291467] ? raw_destroy+0x30/0x30 [ 2544.292310] ? ip_finish_output+0x330/0x330 [ 2544.293252] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2544.294355] ? ipv4_mtu+0x1ed/0x2c0 [ 2544.295154] ? raw_destroy+0x30/0x30 [ 2544.295986] ip_append_data+0x114/0x1a0 [ 2544.296874] raw_sendmsg+0xaa6/0x29d0 [ 2544.297724] ? dst_output+0x170/0x170 [ 2544.298555] ? __lock_acquire+0x1657/0x5b00 [ 2544.299528] ? perf_trace_lock+0xac/0x490 [ 2544.300431] ? SOFTIRQ_verbose+0x10/0x10 [ 2544.301319] ? create_object.isra.0+0x3ad/0xa20 [ 2544.302334] ? __lockdep_reset_lock+0x180/0x180 [ 2544.303364] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2544.304491] ? find_held_lock+0x2c/0x110 [ 2544.305397] ? trace_hardirqs_on+0x5b/0x180 [ 2544.306341] ? dst_output+0x170/0x170 [ 2544.307190] inet_sendmsg+0x11d/0x140 [ 2544.308039] ? inet_send_prepare+0x540/0x540 [ 2544.308997] __sock_sendmsg+0x13c/0x190 [ 2544.309869] ____sys_sendmsg+0x334/0x870 [ 2544.310757] ? sock_write_iter+0x3d0/0x3d0 [ 2544.311690] ? do_recvmmsg+0x6d0/0x6d0 [ 2544.312535] ? perf_trace_lock+0xac/0x490 [ 2544.313445] ? __lockdep_reset_lock+0x180/0x180 [ 2544.314455] ? perf_trace_lock+0xac/0x490 [ 2544.315365] ___sys_sendmsg+0xf3/0x170 [ 2544.316515] ? sendmsg_copy_msghdr+0x160/0x160 [ 2544.317702] ? lock_downgrade+0x6d0/0x6d0 [ 2544.318776] ? lock_downgrade+0x6d0/0x6d0 [ 2544.319880] ? __fget_files+0x296/0x4c0 [ 2544.320920] ? __fget_light+0xea/0x290 [ 2544.321930] __sys_sendmmsg+0x195/0x470 [ 2544.322958] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2544.324073] ? lock_downgrade+0x6d0/0x6d0 [ 2544.325165] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2544.325319] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2544.326407] ? wait_for_completion_io+0x270/0x270 [ 2544.326435] ? rcu_read_lock_any_held+0x75/0xa0 [ 2544.326455] ? vfs_write+0x354/0xa70 [ 2544.326482] ? fput_many+0x2f/0x1a0 [ 2544.331839] ? ksys_write+0x1a9/0x260 [ 2544.332665] ? __ia32_sys_read+0xb0/0xb0 [ 2544.333550] __x64_sys_sendmmsg+0x99/0x100 [ 2544.334466] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.335591] do_syscall_64+0x33/0x40 [ 2544.336397] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2544.337504] RIP: 0033:0x7f70f6d55b19 [ 2544.338311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.342273] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2544.343913] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2544.345465] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2544.346996] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.348540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2544.350070] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:23:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x600, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:23:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x700, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2544.411956] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:23:03 executing program 3: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f00000002c0)=""/202) r0 = msgget$private(0x0, 0xc0bf6df1b4bbf058) msgsnd(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x0) msgrcv(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/171], 0xab, 0x2, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x80, 0x7f, 0x2, 0x0, 0x7fff, 0x80000, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x5}, 0x4, 0xfffffffffffffffc, 0x5, 0x3, 0x8, 0x9, 0x2, 0x0, 0x1, 0x0, 0x62596a9a}, r1, 0x0, r2, 0xa) msgrcv(0xffffffffffffffff, &(0x7f00000003c0)={0x0, ""/195}, 0xcb, 0x3, 0x2800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f00000001c0)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 14:23:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x900, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:23:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xe, 0x1010, r3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x5e, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x22, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 14:23:03 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) [ 2544.545902] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:23:03 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 30) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r1, 0xda76892334876dec) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 14:23:03 executing program 1: getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x2, 0x7, 0x6, 0x8, 0x2]}, &(0x7f0000000080)=0x54) unshare(0x54040780) unshare(0x44000200) 14:23:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xa00, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2544.651985] FAULT_INJECTION: forcing a failure. [ 2544.651985] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.654382] CPU: 1 PID: 25224 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2544.655826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.657530] Call Trace: [ 2544.658083] dump_stack+0x107/0x167 [ 2544.658847] should_fail.cold+0x5/0xa [ 2544.659659] ? __alloc_skb+0x6d/0x5b0 [ 2544.660452] should_failslab+0x5/0x20 [ 2544.661236] kmem_cache_alloc_node+0x55/0x330 [ 2544.662160] __alloc_skb+0x6d/0x5b0 [ 2544.662921] __ip_append_data+0x2930/0x3310 [ 2544.663851] ? raw_destroy+0x30/0x30 [ 2544.664629] ? ip_finish_output+0x330/0x330 [ 2544.665512] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2544.666608] ? ipv4_mtu+0x1ed/0x2c0 [ 2544.667409] ? raw_destroy+0x30/0x30 [ 2544.668233] ip_append_data+0x114/0x1a0 [ 2544.669080] raw_sendmsg+0xaa6/0x29d0 [ 2544.669936] ? dst_output+0x170/0x170 [ 2544.670722] ? __lock_acquire+0x1657/0x5b00 [ 2544.671710] ? perf_trace_lock+0xac/0x490 [ 2544.672577] ? SOFTIRQ_verbose+0x10/0x10 [ 2544.673423] ? create_object.isra.0+0x3ad/0xa20 [ 2544.674392] ? __lockdep_reset_lock+0x180/0x180 [ 2544.675394] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2544.676480] ? find_held_lock+0x2c/0x110 [ 2544.677335] ? trace_hardirqs_on+0x5b/0x180 [ 2544.678233] ? dst_output+0x170/0x170 [ 2544.679019] inet_sendmsg+0x11d/0x140 [ 2544.679815] ? inet_send_prepare+0x540/0x540 [ 2544.680723] __sock_sendmsg+0x13c/0x190 [ 2544.681566] ____sys_sendmsg+0x334/0x870 [ 2544.682429] ? sock_write_iter+0x3d0/0x3d0 [ 2544.683301] ? do_recvmmsg+0x6d0/0x6d0 [ 2544.684111] ? perf_trace_lock+0xac/0x490 [ 2544.684968] ? __lockdep_reset_lock+0x180/0x180 [ 2544.685924] ? perf_trace_lock+0xac/0x490 [ 2544.686778] ___sys_sendmsg+0xf3/0x170 [ 2544.687594] ? sendmsg_copy_msghdr+0x160/0x160 [ 2544.688413] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2544.688534] ? lock_downgrade+0x6d0/0x6d0 [ 2544.691263] ? lock_downgrade+0x6d0/0x6d0 [ 2544.692130] ? __fget_files+0x296/0x4c0 [ 2544.692956] ? __fget_light+0xea/0x290 [ 2544.693762] __sys_sendmmsg+0x195/0x470 [ 2544.694586] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2544.695470] ? lock_downgrade+0x6d0/0x6d0 [ 2544.696356] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2544.696472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2544.697378] ? wait_for_completion_io+0x270/0x270 [ 2544.697405] ? rcu_read_lock_any_held+0x75/0xa0 [ 2544.697431] ? vfs_write+0x354/0xa70 [ 2544.701897] ? fput_many+0x2f/0x1a0 [ 2544.702633] ? ksys_write+0x1a9/0x260 [ 2544.703411] ? __ia32_sys_read+0xb0/0xb0 [ 2544.704253] __x64_sys_sendmmsg+0x99/0x100 [ 2544.705117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.706156] do_syscall_64+0x33/0x40 [ 2544.706916] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2544.707968] RIP: 0033:0x7f70f6d55b19 [ 2544.708730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.712428] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2544.714023] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2544.715461] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2544.716939] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.718410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2544.719875] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:23:18 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) pipe(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0045878, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6b89, &(0x7f0000000140)={0x0, 0xf2d0, 0x8, 0x0, 0x49, 0x0, r0}, &(0x7f0000bfe000/0x400000)=nil, &(0x7f0000c17000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, {0x2, r3}}, 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x1c6, 0xffcd, 0x0, 0x0, 0x0) 14:23:18 executing program 3: rename(&(0x7f00000006c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000080)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040081, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) ftruncate(0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x17) creat(&(0x7f0000000000)='./file0/file0\x00', 0x100) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) unshare(0x48020200) [ 2559.145222] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:23:18 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) 14:23:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xbf2, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:23:18 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 31) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73623d3078f7ffffff3306"]) mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 14:23:18 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:23:18 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, &(0x7f00000002c0)='rpc_pipefs\x00') r1 = getpid() perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x20, 0x7, 0x6, 0x5, 0x0, 0x4, 0x49014, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xca58, 0x1, @perf_config_ext={0x725, 0x1}, 0x1002c, 0x2, 0x1496, 0x8, 0x9, 0x2, 0x9, 0x0, 0x5}, r1, 0xa, r0, 0xf) [ 2559.152206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2559.163117] FAULT_INJECTION: forcing a failure. [ 2559.163117] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.165519] CPU: 1 PID: 25347 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2559.166958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2559.168721] Call Trace: [ 2559.169278] dump_stack+0x107/0x167 [ 2559.170050] should_fail.cold+0x5/0xa [ 2559.170855] ? create_object.isra.0+0x3a/0xa20 [ 2559.171832] should_failslab+0x5/0x20 [ 2559.172614] kmem_cache_alloc+0x5b/0x310 [ 2559.173449] create_object.isra.0+0x3a/0xa20 [ 2559.174347] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2559.175388] kmem_cache_alloc_node+0x169/0x330 [ 2559.176350] __alloc_skb+0x6d/0x5b0 [ 2559.177103] __ip_append_data+0x2930/0x3310 [ 2559.178004] ? raw_destroy+0x30/0x30 [ 2559.178781] ? ip_finish_output+0x330/0x330 [ 2559.179661] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2559.180705] ? ipv4_mtu+0x1ed/0x2c0 [ 2559.181452] ? raw_destroy+0x30/0x30 [ 2559.182218] ip_append_data+0x114/0x1a0 [ 2559.183047] raw_sendmsg+0xaa6/0x29d0 [ 2559.183882] ? dst_output+0x170/0x170 [ 2559.184660] ? __lock_acquire+0x1657/0x5b00 [ 2559.185574] ? perf_trace_lock+0xac/0x490 [ 2559.186430] ? SOFTIRQ_verbose+0x10/0x10 [ 2559.187264] ? create_object.isra.0+0x3ad/0xa20 [ 2559.188231] ? __lockdep_reset_lock+0x180/0x180 [ 2559.189213] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2559.190267] ? find_held_lock+0x2c/0x110 [ 2559.191123] ? trace_hardirqs_on+0x5b/0x180 [ 2559.192015] ? dst_output+0x170/0x170 [ 2559.192796] inet_sendmsg+0x11d/0x140 [ 2559.193584] ? inet_send_prepare+0x540/0x540 [ 2559.194495] __sock_sendmsg+0x13c/0x190 [ 2559.195309] ____sys_sendmsg+0x334/0x870 [ 2559.196145] ? sock_write_iter+0x3d0/0x3d0 [ 2559.197003] ? do_recvmmsg+0x6d0/0x6d0 [ 2559.197798] ? perf_trace_lock+0xac/0x490 [ 2559.198669] ? __lockdep_reset_lock+0x180/0x180 [ 2559.199636] ? perf_trace_lock+0xac/0x490 [ 2559.200526] ___sys_sendmsg+0xf3/0x170 [ 2559.201346] ? sendmsg_copy_msghdr+0x160/0x160 [ 2559.202298] ? lock_downgrade+0x6d0/0x6d0 [ 2559.203159] ? lock_downgrade+0x6d0/0x6d0 [ 2559.204029] ? __fget_files+0x296/0x4c0 [ 2559.204872] ? __fget_light+0xea/0x290 [ 2559.205683] __sys_sendmmsg+0x195/0x470 [ 2559.206515] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2559.207403] ? lock_downgrade+0x6d0/0x6d0 [ 2559.208288] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2559.209282] ? wait_for_completion_io+0x270/0x270 [ 2559.210266] ? rcu_read_lock_any_held+0x75/0xa0 [ 2559.211210] ? vfs_write+0x354/0xa70 [ 2559.211991] ? fput_many+0x2f/0x1a0 [ 2559.212734] ? ksys_write+0x1a9/0x260 [ 2559.213509] ? __ia32_sys_read+0xb0/0xb0 [ 2559.214348] __x64_sys_sendmmsg+0x99/0x100 [ 2559.215214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2559.216271] do_syscall_64+0x33/0x40 [ 2559.217029] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2559.218069] RIP: 0033:0x7f70f6d55b19 [ 2559.218834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2559.222577] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2559.224150] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2559.225601] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2559.227060] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.228523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2559.229969] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:23:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xf00, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:23:18 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) [ 2559.258821] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2559.279796] devtmpfs: Unknown parameter 'rpc_pipefs' 14:23:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x4800, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2559.300414] devtmpfs: Unknown parameter 'rpc_pipefs' [ 2559.314466] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2559.330435] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2559.354198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2800, 0x1) ioctl$FICLONE(r0, 0x40049409, r2) 14:23:18 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:23:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x4c00, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:23:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r3, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_open_procfs(r1, &(0x7f0000001540)='totmaps\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000014c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) dup2(0xffffffffffffffff, r4) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) [ 2559.502729] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:23:18 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) socket$inet6_tcp(0xa, 0x1, 0x0) 14:23:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x6000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2559.572166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2559.623443] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2559.920263] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 14:23:41 executing program 1: ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000140)={0x1, 0x9}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x88) write(r0, &(0x7f0000001100)="466660c2fbb47cd5514e2df1b49ec0319be3d0cdbdec01928f8fa1e7af3697af74db3f3efd663c9009d15ad81c2e3101ecd232659b5dff32182be22a3d5fefe9ad0adc8f816dba8c9a7a78d963fb54fd92e6516e5e44cabfd92a2da463f74dd43c5cc29b52ee073c025c315cfeb31c27da690e45f103d7776c9f4f250553a5b1ed2f45229583321be27d5b8263aab567672eda0f018a15a675f347fc30c4ba4baa2fc208305df23268cf429e0312ed036305b4c5d82c20b064fdc65dae4f", 0xbe) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x7002, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = openat(0xffffffffffffffff, &(0x7f0000001080)='/proc/self/exe\x00', 0x0, 0x184) r4 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000002000000050000004ee500"/24], 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r5 = syz_open_dev$usbmon(&(0x7f00000010c0), 0xffffffff, 0x40000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) sendfile(r0, r3, 0x0, 0x100000001) 14:23:41 executing program 2: ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) fallocate(0xffffffffffffffff, 0xa, 0x10000, 0x5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000050000000020000000400000052", 0x49, 0x1c00}, {&(0x7f0000000380)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af30200040000000000000000000000000000006000000002000000040000006200000000000000f22a6eb0a7525e14e9f2a4757df8d399f73f5f33cf457c3c4f9d3b07825affdd93a7cdd74353dfa8b9535e6b53e8be546b", 0x81, 0x2000}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x14000}], 0x0, &(0x7f0000013800)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 14:23:41 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:23:41 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@local, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3ac1cb7e1213e7e58210ac1c8978cf13b59083a9e8daefa3e4f8330500000000000000cf1d49182af8ced85a6c68bb712cf014cd1e04b8b0100a440f74ba0370234bbf3c4f4e74cd8cdc", @ANYRES16=0x0, @ANYBLOB="00082abd47c24297c13f330400000a000900bbbbbbbbbbbb0000080031380955f8a7b6024d49ef000100000008003c000100000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x90) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pidfd_open(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x9bbb) 14:23:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x6800, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:23:41 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4040000) 14:23:41 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fgetxattr(r1, &(0x7f0000000180)=@random={'security.', 'ethtool\x00'}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)=ANY=[@ANYBLOB="0100feff00000023131000401259b238bea44a8af15bba7391ba52ef93eb5b10aab04a9297be640a81e9fb63b8433e27121166517be55456dbec0cee82741e149ec10d70f2fc4e69b8e3dde8d2d73a0a9ad6c743a80ca113f510c96ca52e292515299bb66ac4ab0759e6", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) 14:23:41 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 32) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2582.365813] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2582.392163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2582.394512] FAULT_INJECTION: forcing a failure. [ 2582.394512] name failslab, interval 1, probability 0, space 0, times 0 [ 2582.394531] CPU: 0 PID: 25517 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2582.394540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2582.394545] Call Trace: [ 2582.394579] dump_stack+0x107/0x167 [ 2582.400368] should_fail.cold+0x5/0xa [ 2582.401027] should_failslab+0x5/0x20 [ 2582.401666] __kmalloc_node_track_caller+0x74/0x3b0 [ 2582.402519] ? __ip_append_data+0x2930/0x3310 [ 2582.403288] __alloc_skb+0xb1/0x5b0 [ 2582.403898] __ip_append_data+0x2930/0x3310 [ 2582.404656] ? raw_destroy+0x30/0x30 [ 2582.405301] ? ip_finish_output+0x330/0x330 [ 2582.406039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2582.406887] ? ipv4_mtu+0x1ed/0x2c0 [ 2582.407499] ? raw_destroy+0x30/0x30 [ 2582.408136] ip_append_data+0x114/0x1a0 [ 2582.408819] raw_sendmsg+0xaa6/0x29d0 [ 2582.409460] ? dst_output+0x170/0x170 [ 2582.410093] ? __lock_acquire+0x1657/0x5b00 [ 2582.410832] ? perf_trace_lock+0xac/0x490 [ 2582.411528] ? SOFTIRQ_verbose+0x10/0x10 [ 2582.412231] ? create_object.isra.0+0x3ad/0xa20 [ 2582.413016] ? __lockdep_reset_lock+0x180/0x180 [ 2582.413822] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2582.414676] ? find_held_lock+0x2c/0x110 [ 2582.415382] ? trace_hardirqs_on+0x5b/0x180 [ 2582.416103] ? dst_output+0x170/0x170 [ 2582.416744] inet_sendmsg+0x11d/0x140 [ 2582.417384] ? inet_send_prepare+0x540/0x540 [ 2582.418128] __sock_sendmsg+0x13c/0x190 [ 2582.418796] ____sys_sendmsg+0x334/0x870 [ 2582.419478] ? sock_write_iter+0x3d0/0x3d0 [ 2582.420212] ? do_recvmmsg+0x6d0/0x6d0 [ 2582.420870] ? perf_trace_lock+0xac/0x490 [ 2582.421560] ? __lockdep_reset_lock+0x180/0x180 [ 2582.422341] ? perf_trace_lock+0xac/0x490 [ 2582.423043] ___sys_sendmsg+0xf3/0x170 [ 2582.423685] ? sendmsg_copy_msghdr+0x160/0x160 [ 2582.424464] ? lock_downgrade+0x6d0/0x6d0 [ 2582.425152] ? lock_downgrade+0x6d0/0x6d0 [ 2582.425860] ? __fget_files+0x296/0x4c0 [ 2582.426534] ? __fget_light+0xea/0x290 [ 2582.427198] __sys_sendmmsg+0x195/0x470 [ 2582.427861] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2582.428596] ? lock_downgrade+0x6d0/0x6d0 [ 2582.429296] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2582.430114] ? wait_for_completion_io+0x270/0x270 [ 2582.430941] ? rcu_read_lock_any_held+0x75/0xa0 [ 2582.431714] ? vfs_write+0x354/0xa70 [ 2582.432369] ? fput_many+0x2f/0x1a0 [ 2582.432981] ? ksys_write+0x1a9/0x260 [ 2582.433620] ? __ia32_sys_read+0xb0/0xb0 [ 2582.434302] __x64_sys_sendmmsg+0x99/0x100 [ 2582.435033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2582.435895] do_syscall_64+0x33/0x40 [ 2582.436545] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2582.437410] RIP: 0033:0x7f70f6d55b19 [ 2582.438039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2582.441198] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2582.442490] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2582.443705] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2582.444951] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2582.446176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:23:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x6c00, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2582.447394] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2582.527408] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:23:41 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r3) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 14:23:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20100, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3ff) r1 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) pipe(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082dbd7000fddbdf250a0000000c00d605010001004d00000004002800080037000000000009000a0043611f862d0000000a000600ffffffffffff00000800090001ac0f00"], 0x4c}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r4, 0x0, 0x0, 0xc4, 0xa, 0x1, {0x0, 0x0, r6}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x1c6, 0xffcd, 0x0, 0x0, 0x0) 14:23:41 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:23:41 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 33) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x64000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x200000d4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000001740)={&(0x7f0000001200), 0xc, &(0x7f0000001240)={&(0x7f0000001940)={0x140, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x23}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3}, @CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xe0, 0xfa}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3}]}}, @CTA_NAT_SRC={0x84, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x420}, 0x40000) pread64(r1, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x6, 0x5, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001280)="5fa3303b9a803364f7412e6b82791b5d84177b5f465b136e48dcd4d427420b8b4f4132307439babe42c9e611755a4b4af1215266f6007b93aaa439d76ad9c6e0fb66930e78979cd03953128057b9ad", 0x4f, 0x2}, {&(0x7f0000001500)="2b6e8eb0d902cde0633cef07ad11b6777947986100245af3b47131644ab0d65a8f821c481645a0e25f19b4cf63073f984b25c95ffe8cfa7b96b09fb770fb101f36eb5441883de9f11228e8800965eca7558d397fcba78a537838594d5804b94455ff8849f72b9907d8e26eca1910f87297d384f60f222d6ad42d0bf618df0e08877a24e680f0b310543319739e7bc292a4dbbc4ff46810c7bdb23219a8c2e0ede38d885b9d3af495b3846128e9947877e6b3184564c53bb7dcf3fcf7691ea170283cedb56702530f25864a8d28ef49903a7b9ef80a6e1c974ff3b57dee43581d265b1074a3", 0xe5, 0x20}, {&(0x7f0000001600)="729092ddb06293791e1e1da50e7bc78f5e58c7e7d7415b9ddd7b9d5d78641f9874026a5fee2ea5b79e245db0fd78fc46226e68e90602f69e9a191d6fa4b55c9d31ebd4a85485cdca6ee83242230ee041996e6c", 0x53, 0xfffffffffffffbff}, {&(0x7f0000001680)="4d653d37cefad854e75b737675adb15dd2151f07ea1efdc09fc0feb92e0bb71b2ae111e7d5aa35b81bac336f818d32f1abc4406d9d448e5ea832ab35e5b8cc", 0x3f, 0x1000}], 0x208400, &(0x7f0000001840)=ANY=[@ANYBLOB="646d6f64653d307830300200303030303030004f1cb5edde2eff3030303030352c6e6f636f6d70726573732c646f6e745f6d6561737572652c736d61636b66736465663d2f6463762f737230002c69672c736d61636b66736861743d2c646f6e745f686173682c636f6e746578743d73797361646d5f752c00a258f8eeda4685dff4788dd9e5c795ea3c98ca90d7f66039bd38350d6ac47e96293d213c1d7d07950ecba4c4a2a47b0b736eca8219333ea10e8ad4809b5be6cecf2db4202753b79bbd8c03daa11ea0ba7d6a95a9745cdf947cbfe0d8048839fb6bc385c1835f4f582c9ed5d678fe29"]) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x4e8d02, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r4, 0x54) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001780), 0xc4001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) r8 = geteuid() mount$9p_fd(0x0, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x20, &(0x7f0000001b00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}, {@access_any}, {@msize={'msize', 0x3d, 0x3}}, {@mmap}, {@cache_fscache}, {@aname={'aname', 0x3d, 'maps\x00'}}, {@afid={'afid', 0x3d, 0xb92}}], [{@uid_gt={'uid>', r8}}, {@audit}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, '/dev/snd/seq\x00'}}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c40)='net/wireless\x00') sendfile(0xffffffffffffffff, r9, &(0x7f0000001c80), 0x17) 14:23:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x7400, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2582.643436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed410000000800001c00000000000000e0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="75000000000000876d416c6f232c0000008ba55d530f206e9f6ca99593348f37bc94f839df2e17f0a838c4f999aef8cd5f2b1d3daa8e01a970060000000000000016f9097bd6b9a9d28f2ec7a1f1e723463744596748aba751a2406e555bcdaa8697ccd6a1ac71346452247907a054c9a710f6263ff302caf3bf27f950b36d75fdc9911c3fdf7cd9b5be18becdd1902e290ed717ef165cbbbde216"]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/anycast6\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="0179a6ad74474a94748fd27a7e0000000100e0f145a552a5d7ce3289cba6fcb7b403b133a3d89249268453beb3246de9ded23329eaa4375a8e391932190a4182272559e42f98a5e10446340e27f0482bec7cb4732614d6697aebde8928468fc47c6667c8d17666db3fe257b28e068559", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) readv(r2, 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x7, 0x7, 0x4, 0x0, 0x5}, 0x14) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='highspeed\x00', 0xa) getpgrp(0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_raw(r4, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000380)={&(0x7f0000000540)="3b0f5459666ce06d79e9b59b9efad695d2d5260c492b2021586ce90f7fd6a6fc35607b2f4edf1252cbf5cecf8648d2e97415f7bf5db45813944785563ea04f2dab14126a1911392c04dfade86a1ad0a23de1f11b42d3903f681f3ca654fe2b2463356cb4a92f6b9d5cfadf01a7d24f0071edc5fa315e330662e0918c4668de480072c9e479fa2709ea04c547fb1dabe185cf46e92d6bdf11cc52c354f510d4bf01d0fbda79c2e9f3102366ccd19f89e3e3bb37a55d763c35d273d73c7d2d1df897f03e30c580b6800b", 0xc9}, 0x1, 0x0, 0x0, 0x40083}, 0x40084) pidfd_open(0x0, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffd000/0x2000)=nil) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000280), 0x0, 0x0, 0x3) [ 2582.697968] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2582.735355] FAULT_INJECTION: forcing a failure. [ 2582.735355] name failslab, interval 1, probability 0, space 0, times 0 [ 2582.737187] CPU: 0 PID: 25628 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2582.738253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2582.739537] Call Trace: [ 2582.739960] dump_stack+0x107/0x167 [ 2582.740541] should_fail.cold+0x5/0xa [ 2582.741136] ? create_object.isra.0+0x3a/0xa20 [ 2582.741845] should_failslab+0x5/0x20 [ 2582.742443] kmem_cache_alloc+0x5b/0x310 [ 2582.743074] create_object.isra.0+0x3a/0xa20 [ 2582.743762] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2582.744571] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2582.745372] ? __ip_append_data+0x2930/0x3310 [ 2582.746097] __alloc_skb+0xb1/0x5b0 [ 2582.746700] __ip_append_data+0x2930/0x3310 [ 2582.747430] ? raw_destroy+0x30/0x30 [ 2582.748053] ? ip_finish_output+0x330/0x330 [ 2582.748766] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2582.749570] ? ipv4_mtu+0x1ed/0x2c0 [ 2582.750159] ? raw_destroy+0x30/0x30 [ 2582.750764] ip_append_data+0x114/0x1a0 [ 2582.751409] raw_sendmsg+0xaa6/0x29d0 [ 2582.752051] ? dst_output+0x170/0x170 [ 2582.752657] ? __lock_acquire+0x1657/0x5b00 [ 2582.753357] ? perf_trace_lock+0xac/0x490 [ 2582.754018] ? SOFTIRQ_verbose+0x10/0x10 [ 2582.754662] ? create_object.isra.0+0x3ad/0xa20 [ 2582.755415] ? __lockdep_reset_lock+0x180/0x180 [ 2582.756190] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2582.757021] ? find_held_lock+0x2c/0x110 [ 2582.757682] ? trace_hardirqs_on+0x5b/0x180 [ 2582.758370] ? dst_output+0x170/0x170 [ 2582.758965] inet_sendmsg+0x11d/0x140 [ 2582.759573] ? inet_send_prepare+0x540/0x540 [ 2582.760276] __sock_sendmsg+0x13c/0x190 [ 2582.760914] ____sys_sendmsg+0x334/0x870 [ 2582.761559] ? sock_write_iter+0x3d0/0x3d0 [ 2582.762212] ? do_recvmmsg+0x6d0/0x6d0 [ 2582.762828] ? perf_trace_lock+0xac/0x490 [ 2582.763493] ? __lockdep_reset_lock+0x180/0x180 [ 2582.764240] ? perf_trace_lock+0xac/0x490 [ 2582.764922] ___sys_sendmsg+0xf3/0x170 [ 2582.765506] ? sendmsg_copy_msghdr+0x160/0x160 [ 2582.766225] ? lock_downgrade+0x6d0/0x6d0 [ 2582.766890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2582.767709] ? __fget_files+0x296/0x4c0 [ 2582.768337] ? __fget_light+0xea/0x290 [ 2582.768952] __sys_sendmmsg+0x195/0x470 [ 2582.769584] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2582.770250] ? lock_downgrade+0x6d0/0x6d0 [ 2582.770911] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2582.771670] ? wait_for_completion_io+0x270/0x270 [ 2582.772434] ? rcu_read_lock_any_held+0x75/0xa0 [ 2582.773176] ? vfs_write+0x354/0xa70 [ 2582.773780] ? fput_many+0x2f/0x1a0 [ 2582.774366] ? ksys_write+0x1a9/0x260 [ 2582.774949] ? __ia32_sys_read+0xb0/0xb0 [ 2582.775596] __x64_sys_sendmmsg+0x99/0x100 [ 2582.776273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2582.777065] do_syscall_64+0x33/0x40 [ 2582.777644] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2582.778445] RIP: 0033:0x7f70f6d55b19 [ 2582.779027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2582.781975] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2582.783201] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2582.784352] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2582.785473] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2582.786566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2582.787610] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2582.953425] EXT4-fs (loop6): Unrecognized mount option "u" or missing value [ 2600.181473] udc-core: couldn't find an available UDC or it's busy [ 2600.182430] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:23:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x7a00, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:23:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38373635383433343000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffe1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffd9089e497966e8eb3056391d3c2ab300"]) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x22a0006, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200) 14:23:59 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r2) syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400) 14:23:59 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:23:59 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 34) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:23:59 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x20, 0x2, 0xf9, 0x8, 0x0, 0x4, 0x80000, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x800, 0x8, 0x8, 0xd, 0xb37, 0x5, 0x180, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xf, r0, 0x1) sendfile(r1, r0, 0x0, 0x95) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) lseek(r2, 0x9e46, 0x0) fsync(r2) fsmount(r2, 0x1, 0x70) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x20000004) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63d634eff62cade5616368653d6d6d71702c76657273696f6e3d1907009e0983a23e6093847f00f0ee9433961002b86713c9849eb4a8f8"]) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) pidfd_getfd(r2, r3, 0x0) 14:23:59 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="0289819eecd945439d8a8b16bf2bf2b67eefb591f4cf4db9ead300c6ac8ba94f7d4a804292338b2abd8472d8beffa0ce3669f0087fe6e41dd4cf60d158da85532ae8", 0x42) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x4, 0x0, &(0x7f0000000340)) fcntl$dupfd(r2, 0x0, r2) sendfile(r0, r1, 0x0, 0x100000001) 14:23:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x41015500, 0x20000000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000000)={{r1}, "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"}) [ 2600.205037] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2600.220770] FAULT_INJECTION: forcing a failure. [ 2600.220770] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.222294] CPU: 1 PID: 25757 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2600.223237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.224388] Call Trace: [ 2600.224762] dump_stack+0x107/0x167 [ 2600.225272] should_fail.cold+0x5/0xa [ 2600.225810] ? __alloc_skb+0x6d/0x5b0 [ 2600.226323] should_failslab+0x5/0x20 [ 2600.226836] kmem_cache_alloc_node+0x55/0x330 [ 2600.227446] __alloc_skb+0x6d/0x5b0 [ 2600.227957] __ip_append_data+0x2930/0x3310 [ 2600.228584] ? raw_destroy+0x30/0x30 [ 2600.229061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2600.230201] ? ip_finish_output+0x330/0x330 [ 2600.230216] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2600.230227] ? ipv4_mtu+0x1ed/0x2c0 [ 2600.230243] ? raw_destroy+0x30/0x30 [ 2600.230263] ip_append_data+0x114/0x1a0 [ 2600.233463] raw_sendmsg+0xaa6/0x29d0 [ 2600.234004] ? dst_output+0x170/0x170 [ 2600.234523] ? __lock_acquire+0x1657/0x5b00 [ 2600.235110] ? perf_trace_lock+0xac/0x490 [ 2600.235673] ? SOFTIRQ_verbose+0x10/0x10 [ 2600.236241] ? create_object.isra.0+0x3ad/0xa20 [ 2600.236886] ? __lockdep_reset_lock+0x180/0x180 [ 2600.237542] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2600.238240] ? find_held_lock+0x2c/0x110 [ 2600.238804] ? trace_hardirqs_on+0x5b/0x180 [ 2600.239392] ? dst_output+0x170/0x170 [ 2600.239916] inet_sendmsg+0x11d/0x140 [ 2600.240452] ? inet_send_prepare+0x540/0x540 [ 2600.241043] __sock_sendmsg+0x13c/0x190 [ 2600.241569] ____sys_sendmsg+0x334/0x870 [ 2600.242108] ? sock_write_iter+0x3d0/0x3d0 [ 2600.242685] ? do_recvmmsg+0x6d0/0x6d0 [ 2600.243221] ? perf_trace_lock+0xac/0x490 [ 2600.243798] ? __lockdep_reset_lock+0x180/0x180 [ 2600.244455] ? perf_trace_lock+0xac/0x490 [ 2600.245052] ___sys_sendmsg+0xf3/0x170 [ 2600.245598] ? sendmsg_copy_msghdr+0x160/0x160 [ 2600.246254] ? lock_downgrade+0x6d0/0x6d0 [ 2600.246834] ? lock_downgrade+0x6d0/0x6d0 [ 2600.247404] ? __fget_files+0x296/0x4c0 [ 2600.247962] ? __fget_light+0xea/0x290 [ 2600.248509] __sys_sendmmsg+0x195/0x470 [ 2600.249048] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2600.249616] ? lock_downgrade+0x6d0/0x6d0 [ 2600.250185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2600.250827] ? wait_for_completion_io+0x270/0x270 [ 2600.251465] ? rcu_read_lock_any_held+0x75/0xa0 [ 2600.252089] ? vfs_write+0x354/0xa70 [ 2600.252602] ? fput_many+0x2f/0x1a0 [ 2600.253084] ? ksys_write+0x1a9/0x260 [ 2600.253582] ? __ia32_sys_read+0xb0/0xb0 [ 2600.254123] __x64_sys_sendmmsg+0x99/0x100 [ 2600.254686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.255365] do_syscall_64+0x33/0x40 [ 2600.255871] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2600.256559] RIP: 0033:0x7f70f6d55b19 [ 2600.257074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.259626] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2600.260678] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2600.261691] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2600.262638] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2600.263650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2600.264676] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:23:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x8602, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:23:59 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) dup2(0xffffffffffffffff, r2) [ 2600.323751] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:23:59 executing program 3: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r2 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x1, 0x2, 0x101, 0x8, r2}) ptrace$getsig(0x4202, r2, 0x6, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000013c0)=0x5) r3 = dup2(r0, r1) r4 = openat(0xffffffffffffffff, 0x0, 0x64300, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000003c0)={{r3}, 0x0, 0xa, @unused=[0x398, 0x6, 0x400, 0x2], @subvolid=0x1}) lsetxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), &(0x7f0000000240)=@md5={0x1, "6d6edc9db981cf5732af13cdee47fc76"}, 0x11, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10000) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0xa9, 0x0, 0x0, 0x0, 0xc4, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) [ 2600.341680] 9pnet: Unknown protocol version  14:23:59 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 35) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2600.408945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xf000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2600.472850] FAULT_INJECTION: forcing a failure. [ 2600.472850] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.475431] CPU: 0 PID: 25863 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2600.476951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2600.478732] Call Trace: [ 2600.479312] dump_stack+0x107/0x167 [ 2600.480102] should_fail.cold+0x5/0xa [ 2600.480960] ? create_object.isra.0+0x3a/0xa20 [ 2600.481950] should_failslab+0x5/0x20 [ 2600.482765] kmem_cache_alloc+0x5b/0x310 [ 2600.483660] create_object.isra.0+0x3a/0xa20 [ 2600.484631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2600.485749] kmem_cache_alloc_node+0x169/0x330 [ 2600.486760] __alloc_skb+0x6d/0x5b0 [ 2600.487568] __ip_append_data+0x2930/0x3310 [ 2600.488534] ? raw_destroy+0x30/0x30 [ 2600.489402] ? ip_finish_output+0x330/0x330 [ 2600.490355] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2600.491466] ? ipv4_mtu+0x1ed/0x2c0 14:23:59 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) [ 2600.492281] ? raw_destroy+0x30/0x30 [ 2600.493189] ip_append_data+0x114/0x1a0 [ 2600.494069] raw_sendmsg+0xaa6/0x29d0 [ 2600.494921] ? dst_output+0x170/0x170 [ 2600.495755] ? __lock_acquire+0x1657/0x5b00 [ 2600.496734] ? perf_trace_lock+0xac/0x490 [ 2600.497638] ? SOFTIRQ_verbose+0x10/0x10 [ 2600.498562] ? create_object.isra.0+0x3ad/0xa20 [ 2600.499571] ? __lockdep_reset_lock+0x180/0x180 [ 2600.500612] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2600.501722] ? find_held_lock+0x2c/0x110 [ 2600.502619] ? trace_hardirqs_on+0x5b/0x180 [ 2600.503554] ? dst_output+0x170/0x170 [ 2600.504389] inet_sendmsg+0x11d/0x140 [ 2600.505221] ? inet_send_prepare+0x540/0x540 [ 2600.506182] __sock_sendmsg+0x13c/0x190 [ 2600.507054] ____sys_sendmsg+0x334/0x870 [ 2600.507946] ? sock_write_iter+0x3d0/0x3d0 [ 2600.508881] ? do_recvmmsg+0x6d0/0x6d0 [ 2600.509774] ? perf_trace_lock+0xac/0x490 [ 2600.510695] ? __lockdep_reset_lock+0x180/0x180 [ 2600.511713] ? perf_trace_lock+0xac/0x490 [ 2600.512634] ___sys_sendmsg+0xf3/0x170 [ 2600.513485] ? sendmsg_copy_msghdr+0x160/0x160 [ 2600.514489] ? lock_downgrade+0x6d0/0x6d0 [ 2600.515411] ? lock_downgrade+0x6d0/0x6d0 [ 2600.516334] ? __fget_files+0x296/0x4c0 [ 2600.517214] ? __fget_light+0xea/0x290 [ 2600.517866] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2600.518077] __sys_sendmmsg+0x195/0x470 [ 2600.520332] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2600.521300] ? lock_downgrade+0x6d0/0x6d0 [ 2600.522275] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2600.523336] ? wait_for_completion_io+0x270/0x270 [ 2600.524407] ? rcu_read_lock_any_held+0x75/0xa0 [ 2600.525420] ? vfs_write+0x354/0xa70 [ 2600.526237] ? fput_many+0x2f/0x1a0 [ 2600.527036] ? ksys_write+0x1a9/0x260 [ 2600.527870] ? __ia32_sys_read+0xb0/0xb0 [ 2600.528784] __x64_sys_sendmmsg+0x99/0x100 [ 2600.529708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2600.530843] do_syscall_64+0x33/0x40 [ 2600.531660] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2600.532787] RIP: 0033:0x7f70f6d55b19 [ 2600.533603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2600.537654] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2600.539320] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2600.540895] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2600.542453] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2600.544018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2600.545585] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:23:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xf20b, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2600.577906] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:23:59 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) [ 2600.663573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:24:15 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:24:15 executing program 2: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x280000, 0x7a) 14:24:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x88042, 0x180) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000051191a48b9a822a4000a00000f000000000000000000"], 0x1c}}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x1, 0x408000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file1\x00'}) setsockopt(r3, 0x0, 0xa43, &(0x7f0000000200)="fd8b64e79f2be9c1f92aceec521d54cfae3a488f29da5646fed6b8ec046628ed8e852782c1b9fbec200b93c6a35c061b211710265d26042ff66cc12f61979b3cf7a63a4b9c82be7edfcb7868da801fe00370f41f66840844ed87ed38a6b7ae5a5a4a9b058e4f8e23004a1049fc12d1230dbe47ef888cd46d07d4061666b273667034504f8df86aaed53b1832d7d7893893dd434c783fb7cd76aa145bdb", 0x9d) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000100)={0x1c, 0x10, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0]}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7fff, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/keys\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x6c2fb2b8) 14:24:15 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:24:15 executing program 6: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {r0, r1/1000+60000}}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000140)=0x1000, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) r3 = fork() r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 14:24:15 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 36) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:24:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat2(r0, &(0x7f0000006480)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000006400)={0x3, 0x80, 0x0, 0x5, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x16, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x3001, 0xdd, 0xf0, 0x5, 0x0, 0xffff, 0x7, 0x0, 0x4104}, 0x0, 0x5, r1, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0xa00000, &(0x7f0000000200)={[{@none}, {}, {@xattr}, {@subsystem='blkio'}, {@none}], [{@pcr={'pcr', 0x3d, 0x18}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) getdents(0xffffffffffffffff, &(0x7f0000007b00)=""/172, 0xac) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 14:24:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x34000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2616.918556] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2616.924078] FAULT_INJECTION: forcing a failure. [ 2616.924078] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.926551] CPU: 0 PID: 25907 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2616.928117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2616.930000] Call Trace: [ 2616.930600] dump_stack+0x107/0x167 [ 2616.931426] should_fail.cold+0x5/0xa [ 2616.932265] ? create_object.isra.0+0x3a/0xa20 [ 2616.933297] should_failslab+0x5/0x20 [ 2616.934147] kmem_cache_alloc+0x5b/0x310 [ 2616.935073] create_object.isra.0+0x3a/0xa20 [ 2616.936046] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2616.937196] kmem_cache_alloc_node+0x169/0x330 [ 2616.938203] __alloc_skb+0x6d/0x5b0 [ 2616.939011] __ip_append_data+0x2930/0x3310 [ 2616.939970] ? raw_destroy+0x30/0x30 [ 2616.940816] ? ip_finish_output+0x330/0x330 [ 2616.941759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2616.942857] ? ipv4_mtu+0x1ed/0x2c0 [ 2616.943650] ? raw_destroy+0x30/0x30 [ 2616.944467] ip_append_data+0x114/0x1a0 [ 2616.945342] raw_sendmsg+0xaa6/0x29d0 [ 2616.946190] ? dst_output+0x170/0x170 [ 2616.947025] ? __lock_acquire+0x1657/0x5b00 [ 2616.947988] ? perf_trace_lock+0xac/0x490 [ 2616.948894] ? SOFTIRQ_verbose+0x10/0x10 [ 2616.949770] ? create_object.isra.0+0x3ad/0xa20 [ 2616.950781] ? __lockdep_reset_lock+0x180/0x180 [ 2616.951804] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2616.952928] ? find_held_lock+0x2c/0x110 [ 2616.953832] ? trace_hardirqs_on+0x5b/0x180 [ 2616.954772] ? dst_output+0x170/0x170 [ 2616.955601] inet_sendmsg+0x11d/0x140 [ 2616.956429] ? inet_send_prepare+0x540/0x540 [ 2616.957381] __sock_sendmsg+0x13c/0x190 [ 2616.958242] ____sys_sendmsg+0x334/0x870 [ 2616.959128] ? sock_write_iter+0x3d0/0x3d0 [ 2616.959202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25906 comm=syz-executor.3 [ 2616.960037] ? do_recvmmsg+0x6d0/0x6d0 [ 2616.960056] ? perf_trace_lock+0xac/0x490 [ 2616.960085] ? __lockdep_reset_lock+0x180/0x180 [ 2616.964451] ? perf_trace_lock+0xac/0x490 [ 2616.965358] ___sys_sendmsg+0xf3/0x170 [ 2616.966204] ? sendmsg_copy_msghdr+0x160/0x160 [ 2616.967199] ? lock_downgrade+0x6d0/0x6d0 14:24:15 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in=@multicast2}}, 0xe8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa31f52699464f0800450000780000000000119078000000000000000000004e200064907802000000000000000000000060e9eca51b913db8f2e8c451c6492a93273f3e5a81aebb3fe1580051a1657cdcef341e008fa00504f212e7b8462700f336cd250a0cb728d6eec84085575dab02c8aca1d59b8892d6f675cca0eefe4b0b"], 0x0) [ 2616.968108] ? lock_downgrade+0x6d0/0x6d0 [ 2616.969133] ? __fget_files+0x296/0x4c0 [ 2616.970015] ? __fget_light+0xea/0x290 [ 2616.970870] __sys_sendmmsg+0x195/0x470 [ 2616.971748] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2616.972697] ? lock_downgrade+0x6d0/0x6d0 [ 2616.973110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2616.973626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2616.973653] ? wait_for_completion_io+0x270/0x270 [ 2616.973676] ? rcu_read_lock_any_held+0x75/0xa0 [ 2616.973693] ? vfs_write+0x354/0xa70 [ 2616.973717] ? fput_many+0x2f/0x1a0 [ 2616.973737] ? ksys_write+0x1a9/0x260 [ 2616.973756] ? __ia32_sys_read+0xb0/0xb0 [ 2616.973787] __x64_sys_sendmmsg+0x99/0x100 [ 2616.973805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2616.973826] do_syscall_64+0x33/0x40 [ 2616.973844] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2616.973857] RIP: 0033:0x7f70f6d55b19 [ 2616.973876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.973887] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2616.973908] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2616.973920] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2616.973931] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.973942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2616.973954] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2616.995409] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:24:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x80000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:24:16 executing program 3: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c09, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0xd) ioctl$TIOCL_PASTESEL(r0, 0x560a, &(0x7f0000000000)) 14:24:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3502, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff2}, 0x1430c, 0x0, 0x400, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/74) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x210c02, 0x84) stat(&(0x7f0000000240)='./file2\x00', &(0x7f00000005c0)) r3 = openat(r0, &(0x7f0000001a00)='./file2\x00', 0x542, 0x1c4) io_setup(0x9, &(0x7f0000000040)=0x0) chroot(&(0x7f0000000440)='./file2\x00') io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000480)={0x0, 0x0, 0x5, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) openat$incfs(r1, &(0x7f00000004c0)='.pending_reads\x00', 0x4c040, 0x0) unlink(&(0x7f0000000340)='./file2\x00') creat(&(0x7f00000003c0)='./file1\x00', 0x10) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)) sendfile(r1, r2, 0x0, 0x100000001) 14:24:16 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:24:16 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMRESET(r0, 0x5312) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x802, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) finit_module(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="ee01000200f2aff0712374e8d68f911915732e6d800b27588ccecd00"/40]) read$eventfd(r3, &(0x7f0000000100), 0x8) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x8) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0x7}, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) [ 2617.184522] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2617.196100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:24:16 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:24:16 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 37) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2617.229942] kauditd_printk_skb: 45 callbacks suppressed [ 2617.229954] audit: type=1400 audit(138256.126:188): avc: denied { module_load } for pid=25931 comm="syz-executor.1" path="/syz-executor.1" dev="sda" ino=15935 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 [ 2617.233977] Module has invalid ELF structures [ 2617.264054] Module has invalid ELF structures [ 2617.287208] FAULT_INJECTION: forcing a failure. [ 2617.287208] name failslab, interval 1, probability 0, space 0, times 0 [ 2617.288501] CPU: 1 PID: 26008 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2617.289184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2617.290006] Call Trace: [ 2617.290278] dump_stack+0x107/0x167 [ 2617.290655] should_fail.cold+0x5/0xa [ 2617.291043] ? create_object.isra.0+0x3a/0xa20 [ 2617.291504] should_failslab+0x5/0x20 [ 2617.291894] kmem_cache_alloc+0x5b/0x310 [ 2617.292307] create_object.isra.0+0x3a/0xa20 [ 2617.292759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2617.293271] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2617.293778] ? __ip_append_data+0x2930/0x3310 [ 2617.294236] __alloc_skb+0xb1/0x5b0 [ 2617.294630] __ip_append_data+0x2930/0x3310 [ 2617.295082] ? raw_destroy+0x30/0x30 [ 2617.295462] ? ip_finish_output+0x330/0x330 [ 2617.295894] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2617.296448] ? ipv4_mtu+0x1ed/0x2c0 [ 2617.296845] ? raw_destroy+0x30/0x30 [ 2617.297238] ip_append_data+0x114/0x1a0 [ 2617.297684] raw_sendmsg+0xaa6/0x29d0 [ 2617.298100] ? dst_output+0x170/0x170 [ 2617.298505] ? __lock_acquire+0x1657/0x5b00 [ 2617.298972] ? perf_trace_lock+0xac/0x490 [ 2617.299408] ? SOFTIRQ_verbose+0x10/0x10 [ 2617.299848] ? create_object.isra.0+0x3ad/0xa20 [ 2617.300337] ? __lockdep_reset_lock+0x180/0x180 [ 2617.300856] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2617.301402] ? find_held_lock+0x2c/0x110 [ 2617.301861] ? trace_hardirqs_on+0x5b/0x180 [ 2617.302324] ? dst_output+0x170/0x170 [ 2617.302727] inet_sendmsg+0x11d/0x140 [ 2617.303120] ? inet_send_prepare+0x540/0x540 [ 2617.303591] __sock_sendmsg+0x13c/0x190 [ 2617.304015] ____sys_sendmsg+0x334/0x870 [ 2617.304464] ? sock_write_iter+0x3d0/0x3d0 [ 2617.304917] ? do_recvmmsg+0x6d0/0x6d0 [ 2617.305327] ? perf_trace_lock+0xac/0x490 [ 2617.305770] ? __lockdep_reset_lock+0x180/0x180 [ 2617.306260] ? perf_trace_lock+0xac/0x490 [ 2617.306690] ___sys_sendmsg+0xf3/0x170 [ 2617.307109] ? sendmsg_copy_msghdr+0x160/0x160 [ 2617.307587] ? lock_downgrade+0x6d0/0x6d0 [ 2617.308023] ? lock_downgrade+0x6d0/0x6d0 [ 2617.308497] ? __fget_files+0x296/0x4c0 [ 2617.308924] ? __fget_light+0xea/0x290 [ 2617.309331] __sys_sendmmsg+0x195/0x470 [ 2617.309753] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2617.310199] ? lock_downgrade+0x6d0/0x6d0 [ 2617.310725] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2617.311395] ? wait_for_completion_io+0x270/0x270 [ 2617.312047] ? rcu_read_lock_any_held+0x75/0xa0 [ 2617.312696] ? vfs_write+0x354/0xa70 [ 2617.313211] ? fput_many+0x2f/0x1a0 [ 2617.313671] ? ksys_write+0x1a9/0x260 [ 2617.314096] ? __ia32_sys_read+0xb0/0xb0 [ 2617.314531] __x64_sys_sendmmsg+0x99/0x100 [ 2617.314968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2617.315531] do_syscall_64+0x33/0x40 [ 2617.315929] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2617.316469] RIP: 0033:0x7f70f6d55b19 [ 2617.316865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2617.318777] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2617.319597] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2617.320334] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2617.321101] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2617.321845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2617.322598] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:24:30 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 38) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:24:30 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x8, 0xfe, 0x9, 0x0, 0x1ff, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x40548, 0x80000000, 0xe8b, 0x9, 0x8, 0x401, 0x5, 0x0, 0x7, 0x0, 0x80000000}, 0xffffffffffffffff, 0x1, r0, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) 14:24:30 executing program 2: ftruncate(0xffffffffffffffff, 0xffff) creat(0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_open_procfs(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) getpeername(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x4) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x1, @mcast2, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="e2deaabc0655c07cf2477951f5d8f838b19a6c0b9ccf6036fb52bc9dc665c40705edb234fb0744f11609756b6918e250755398b6c5f6a4bdadfb62b3bfb78d53b08df7d62db4ee2a2b", 0x49}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="78000000000000002900000039000000870c02cc00000000ff00000000010000000000000000000000000001000100880000000000000000000000000101fe8000000000000000000000000000bbfe8000000000000000000000000000aafe8000000000000000000000000000bb300000000000000029000000040000002203000000000000c910fe880000000000000000000000000001c2047fffffff20000000000000002900007d8d8878de2a41edb373fa00360000006c000000000000000502000700000000780000000000000029000000360000003a0b000000000000c91000000000000000000000000000000001040106c2040000800105020007010200000738000000010c030100b22c000000000000ffffff7f0000000007000000ffff0000000000000000000009000000000000000200000000000000000000580000000000000029000000390000002b08017f00000000fe8000000000000000000000000000c0ff020000000000000000000000000001008000f41e099959000000000000000000000000bb48000000000000002900000039000000320602400000000000000000000000000000000000000000ff010000000000000400000000000001fc01000000d0fd93fe9d95cbc63d19e5150138f97d01c20784db65abd22b73de0d4ea52ea00327"], 0x1e0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="2fb980f5e6ffb069b53f02125e2e5e77791a3ce0911905a71caa60fe4386e3d20a7e9daa64d0fe900695d9f1bd950b4e93d88e06ca4084036944e7a34ad442bd27d2d89fb71e452f5db4062403d65994eda761f5cc4af5aeeb6e41c2b0fd11a122119bef5f2c836056ca9b2d281d7015be40d3094cf5a23be93011c2eba32a3a4d5db627ea3498bd66c499741516041ed348a2ef0bc2134bca20af7979964bda0902a27ec21edeecbaf67f9190b58c8906adf7e5c16d8cee1b3ab6da0a21e3fd3a1e2015bf93ed5a520ed017a0bacef8015d301a5918bfb0cd7b5ac6386b", 0xde}, {&(0x7f0000000500)="288831f2171d9f980fad5d", 0xb}, {&(0x7f0000000540)="240c4203", 0x4}, {&(0x7f0000000640)="a74be57841ceaf6c288709d0756dccbf5f95631d86165bebb5c0a19b0a1a34ec1ad64a88f54913e2c7a85957c4f8e6e6d981996424b2f41c7f1b84a4eaa9473430358b585176b7225a1254818bc201d284751972ba520c62b793327a6a8f64aec302dd5817b9e3ba64ac447b9f382281391fda3d867975ea45da796011bbcb82e6dbcac43363d4e3b7f78efe60b4990530143e6dff54758cc8d1c92fe9d4bdeba9f133d57ab72fe4f082e0f8e6280419656e630e4d95edfb73b92b4eb9b892a0e22ee2d499e914c6a76bfe2227e96a12bcfd8e413cb0686fb1e07f4a735320f7f08e8d5cf8eeff85", 0xe8}], 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="14000000000000002900000034000000de0a000000000000300000000000000029000000370000003c03000000000000c20400000002c910fe8000000000000000000000000000bbf87c87638e840a248d2a9a0f82ad63d22dc9b31bacd3af0a311bb52d1d531f53e84231ddc6815b30512828558b6c080000003890db37cb133a"], 0x48}}], 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x130) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = socket$inet_icmp(0x2, 0x2, 0x1) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0xd) 14:24:30 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:24:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) dup2(0xffffffffffffffff, r0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)={0x800, 0x10, 0x1a}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x10000, 0x0) creat(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) 14:24:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x400300, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:24:30 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:24:30 executing program 1: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2631.875206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2631.876479] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2631.914080] FAULT_INJECTION: forcing a failure. [ 2631.914080] name failslab, interval 1, probability 0, space 0, times 0 14:24:30 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) mknodat$null(r1, &(0x7f00000015c0)='./file0\x00', 0xc000, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:24:30 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2631.916634] CPU: 0 PID: 26064 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2631.918290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2631.920101] Call Trace: [ 2631.920697] dump_stack+0x107/0x167 [ 2631.921513] should_fail.cold+0x5/0xa [ 2631.922364] ? __alloc_skb+0x6d/0x5b0 [ 2631.923204] should_failslab+0x5/0x20 [ 2631.924047] kmem_cache_alloc_node+0x55/0x330 [ 2631.925052] __alloc_skb+0x6d/0x5b0 [ 2631.925857] __ip_append_data+0x2930/0x3310 [ 2631.926817] ? raw_destroy+0x30/0x30 [ 2631.927647] ? ip_finish_output+0x330/0x330 [ 2631.928607] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2631.929708] ? ipv4_mtu+0x1ed/0x2c0 [ 2631.930504] ? raw_destroy+0x30/0x30 [ 2631.931314] ip_append_data+0x114/0x1a0 [ 2631.932194] raw_sendmsg+0xaa6/0x29d0 [ 2631.933053] ? dst_output+0x170/0x170 [ 2631.933896] ? __lock_acquire+0x1657/0x5b00 [ 2631.934859] ? perf_trace_lock+0xac/0x490 [ 2631.935760] ? SOFTIRQ_verbose+0x10/0x10 [ 2631.936650] ? create_object.isra.0+0x3ad/0xa20 [ 2631.937667] ? __lockdep_reset_lock+0x180/0x180 [ 2631.938696] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2631.939813] ? find_held_lock+0x2c/0x110 [ 2631.940738] ? trace_hardirqs_on+0x5b/0x180 [ 2631.941684] ? dst_output+0x170/0x170 [ 2631.942515] inet_sendmsg+0x11d/0x140 [ 2631.943341] ? inet_send_prepare+0x540/0x540 [ 2631.944294] __sock_sendmsg+0x13c/0x190 [ 2631.945169] ____sys_sendmsg+0x334/0x870 [ 2631.946057] ? sock_write_iter+0x3d0/0x3d0 [ 2631.946978] ? do_recvmmsg+0x6d0/0x6d0 [ 2631.947824] ? perf_trace_lock+0xac/0x490 [ 2631.948759] ? __lockdep_reset_lock+0x180/0x180 [ 2631.949770] ? perf_pmu_nop_int+0x5/0x10 [ 2631.950649] ? merge_sched_in+0x142/0xfb0 [ 2631.951560] ___sys_sendmsg+0xf3/0x170 [ 2631.952411] ? sendmsg_copy_msghdr+0x160/0x160 [ 2631.953420] ? lock_downgrade+0x6d0/0x6d0 [ 2631.954348] ? __fget_files+0x296/0x4c0 [ 2631.955233] ? __fget_light+0xea/0x290 [ 2631.956100] __sys_sendmmsg+0x195/0x470 [ 2631.956980] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2631.957928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2631.959086] ? finish_task_switch+0x126/0x5d0 [ 2631.960070] ? __switch_to_asm+0x34/0x60 [ 2631.960982] ? __schedule+0x82c/0x1ea0 [ 2631.961845] ? io_schedule_timeout+0x140/0x140 [ 2631.962846] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2631.964039] ? ksys_write+0x1a9/0x260 [ 2631.964901] __x64_sys_sendmmsg+0x99/0x100 [ 2631.965819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2631.966941] do_syscall_64+0x33/0x40 [ 2631.967751] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2631.968871] RIP: 0033:0x7f70f6d55b19 [ 2631.969681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2631.973687] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2631.975341] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2631.976899] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2631.978448] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2631.979994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2631.981561] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:24:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xe0ffff, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:24:30 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2000000000000001, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696d6530202321ff078334cca8ec658c67550249394203a1"], 0xf) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x18000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x800, 0x6, &(0x7f0000000680)=[{&(0x7f0000000300)="5939ae18df35cffd8f162e793114f0796ef1c2e8e42db4f3f4f3b90b7071629fe0cc3dfbb23ddee49ac0d169e26542c432366ce6ccc2b286fec0ce24536bbb18b417d08596b7e1cf09e3c0a4ff7c6a8d495904fbe17c4b1ce39cbd", 0x5b, 0x4e}, {&(0x7f0000000380)="171a50871835b1f8c5ae1d7a0171bc95", 0x10, 0x3}, {&(0x7f00000003c0)="a8db178794085627fb3c8dcefb13de09ababf346ce751d58d5fe632057199c692407bab7fc98456f6ac93a5cb208c56c429800b37cce5fe046d957eb715491e1feebfe211a0bc325c2dc7cbccdcea02272198bd68d9624174d1da9fdd8c862515bda23f695c2361a510f6ae2739e1bdcb594a69a89b957524212aeece240f4ffa6b4096289d735578d19d5176fa211d0db7a8186d2233578e74a7152cb3409b8ecac9f8d2fa200a31ab56a7c31ea05f67b9befa3ed4ef3281077cd67294696a82f3a4328118a79c3d2a1032e2e988b85235a8dce5074f9e6e2536b076ea181f42acc54b234f44028a2cd5d5ccea6fa258d6759d896", 0xf5, 0x1}, {&(0x7f00000004c0)="8db91510107f7ebd95e72cb310e40237234297dc9d114990050d6aeabd86e40e4dc15113c33a441d7c0ee05d73c3e162c9f44e71199a9293912bc6ba059a531fd180d63e82d6bf9c6bd07c09268f13eccd3cf4cb939a0fe62b60b93997f45ac8df0504f36daccc65", 0x68, 0x97a3}, {&(0x7f0000000540)="c676d4d49d5b95dcc5a0ad7ecbddce5706b3bf97b59ada2afaa822e12040906be0de627d57a577195eac0f713672f2294f66a4b5f2a507b0b3bdde63c57c3f9ae57bbf", 0x43, 0x100000}, {&(0x7f00000005c0)="86c2faddda0dd5bcdeb8515dc3aa2aaf6f354da2b988f3d1c8ee4431fc1fdb3dc961e9e11c461a28c0c4e827892211c61723699784cffa263ebccd2126b6290dd0825050c2600695fecaf8b8629efe714cfc61024d8b7ef376c243efcc531280d2978936e311bb3009cd61451cdeef807568b3183181f61240a4d267d612dc3eef0efe4666b1795e84e8d83789fdd7d120ebda370631ce0331f43a9edc8c11cd7894a0692d", 0xa5, 0x67}], 0x80, &(0x7f0000000740)=ANY=[@ANYBLOB='shortname=mixed,iocharset=cp865,uni_xlate=0,check=strict,uni_xlate=0,euid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=r1, @ANYBLOB="2c66732f2c6f626a5f7f6f6c653d23a20010c2668223db22d19f9347762c611698343d2c"]) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r6 = pidfd_getfd(r4, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="feffff5643f33fa8f100e37b58df3e8cd6ff400000002e236669c45068b0d281f31372b65e09efdd6fd0a0ba945f0384c76e1938415851b3d5a23201320efa2de55bba"]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) sendfile(r5, r4, 0x0, 0x7ffffff9) 14:24:30 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:24:30 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) [ 2632.029987] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2632.031143] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:24:30 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:24:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3123, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb58906d6b66732e66617400028020000040000300000000", 0x18}, {0x0, 0x0, 0x4000}], 0x28e020, &(0x7f0000000080)=ANY=[]) [ 2632.151173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:24:50 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 39) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:24:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xf0ffff, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:24:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000001c0)={0x0, 0x2, 0x40}) 14:24:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) r0 = creat(&(0x7f0000000280)='./file1\x00', 0x1) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) read(0xffffffffffffffff, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) write(r3, &(0x7f0000000180)="dd8975d9d2eb389518e6d5ece8f722e079e9ec8f10122e84986aee763238801c24194552756d9bae3023bb6c959f570655f3ab442d7f", 0x36) openat(0xffffffffffffff9c, &(0x7f0000006440)='./file0\x00', 0x8000, 0xd0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x102, 0x150, 0x7}, 0x18) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000380)=[r5]}, 0x1) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000400)='./file0\x00', 0x0, r6, 0x1100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x1}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xb, 0xffffffffffffffff, 0x0) sendfile(r1, r4, 0x0, 0x80000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x3, &(0x7f00000004c0)=[{0x59, 0xbf, 0xb1, 0x3ff}, {0x1ff, 0x55, 0xb7, 0x80000001}, {0x8, 0xfc, 0x2, 0x59}]}) 14:24:50 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:24:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x9a, 0xfff, 0x9, "fe0783d3c98464b712721fa7e2643a66673206a50dbed6d598090fdeb5ac749e6629939c529546135bff65eac695e4a88dd5eb0320e1d0ba44e25d689185b9522a9622d67a54bcab20417a5e8aa3f39b43f33b28e07994363f4c958a34e9a0ffe28256cda43da8eb610037297e58afeb8b348b7941172baac2b9eeec30e57f7441f542c052aabcff9f45c21a6d1453f386cc5bdf05fd7994220c"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x35, 0x3268, 0x400, "ac19a28e621e46e7d9d917f5dd82099ccbf1ccfd2de0d6a5be7c6a630c86c5790f218c122ef479b41b64732e270a304931aae82ccd"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x4, 0x0, 0x7c2a, "92da14f3"}) 14:24:50 executing program 6: mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xc, 0xc, "4cbb66a69173a58703d1e4de362afd07995d596291d9d6498afd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188", [0x8, 0x5ab3]}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x20340, 0x8) 14:24:50 executing program 4: creat(0x0, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2651.601489] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2651.601732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2651.632444] FAULT_INJECTION: forcing a failure. [ 2651.632444] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.634913] CPU: 0 PID: 26203 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2651.636405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2651.638217] Call Trace: [ 2651.638797] dump_stack+0x107/0x167 [ 2651.639599] should_fail.cold+0x5/0xa [ 2651.640432] ? create_object.isra.0+0x3a/0xa20 [ 2651.641453] should_failslab+0x5/0x20 [ 2651.642274] kmem_cache_alloc+0x5b/0x310 [ 2651.643161] create_object.isra.0+0x3a/0xa20 [ 2651.644116] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2651.645229] kmem_cache_alloc_node+0x169/0x330 [ 2651.646240] __alloc_skb+0x6d/0x5b0 [ 2651.647040] __ip_append_data+0x2930/0x3310 [ 2651.647997] ? raw_destroy+0x30/0x30 [ 2651.648816] ? ip_finish_output+0x330/0x330 [ 2651.649768] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2651.650862] ? ipv4_mtu+0x1ed/0x2c0 [ 2651.651659] ? raw_destroy+0x30/0x30 [ 2651.652464] ip_append_data+0x114/0x1a0 [ 2651.653382] raw_sendmsg+0xaa6/0x29d0 [ 2651.654256] ? dst_output+0x170/0x170 [ 2651.655100] ? __lock_acquire+0x1657/0x5b00 [ 2651.656077] ? perf_trace_lock+0xac/0x490 [ 2651.657005] ? SOFTIRQ_verbose+0x10/0x10 [ 2651.657882] ? create_object.isra.0+0x3ad/0xa20 [ 2651.658893] ? __lockdep_reset_lock+0x180/0x180 [ 2651.659913] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2651.661035] ? find_held_lock+0x2c/0x110 [ 2651.661934] ? trace_hardirqs_on+0x5b/0x180 [ 2651.662871] ? dst_output+0x170/0x170 [ 2651.663697] inet_sendmsg+0x11d/0x140 [ 2651.664527] ? inet_send_prepare+0x540/0x540 [ 2651.665493] __sock_sendmsg+0x13c/0x190 [ 2651.666371] ____sys_sendmsg+0x334/0x870 [ 2651.667252] ? sock_write_iter+0x3d0/0x3d0 [ 2651.668170] ? do_recvmmsg+0x6d0/0x6d0 [ 2651.669030] ? perf_trace_lock+0xac/0x490 [ 2651.669937] ? __lockdep_reset_lock+0x180/0x180 [ 2651.670944] ? perf_trace_lock+0xac/0x490 [ 2651.671848] ___sys_sendmsg+0xf3/0x170 [ 2651.672696] ? sendmsg_copy_msghdr+0x160/0x160 [ 2651.673709] ? lock_downgrade+0x6d0/0x6d0 [ 2651.674625] ? lock_downgrade+0x6d0/0x6d0 [ 2651.675535] ? __fget_files+0x296/0x4c0 [ 2651.676407] ? __fget_light+0xea/0x290 [ 2651.677274] __sys_sendmmsg+0x195/0x470 [ 2651.678139] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2651.679071] ? lock_downgrade+0x6d0/0x6d0 [ 2651.679989] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2651.681038] ? wait_for_completion_io+0x270/0x270 [ 2651.682078] ? rcu_read_lock_any_held+0x75/0xa0 [ 2651.683079] ? vfs_write+0x354/0xa70 [ 2651.683889] ? fput_many+0x2f/0x1a0 [ 2651.684674] ? ksys_write+0x1a9/0x260 [ 2651.685504] ? __ia32_sys_read+0xb0/0xb0 [ 2651.686388] __x64_sys_sendmmsg+0x99/0x100 [ 2651.687305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2651.688419] do_syscall_64+0x33/0x40 [ 2651.689240] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2651.690343] RIP: 0033:0x7f70f6d55b19 [ 2651.691142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2651.695079] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2651.696710] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2651.698257] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2651.699798] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.701354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2651.702883] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2651.733942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:24:50 executing program 4: creat(0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:24:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x1000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2651.781919] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:24:50 executing program 4: creat(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:24:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents(r0, &(0x7f0000000080)=""/248, 0xf8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008011) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_enter(0xffffffffffffffff, 0x0, 0xae5b, 0x0, &(0x7f00000001c0), 0x8) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="20002dbd7000ffdbdf251400000008000300", @ANYRES32=r5, @ANYBLOB="0600b509000500000602b50043000000ded2597b2899d77f6e27f1495e4aafdd435508001400", @ANYRES32=r5, @ANYBLOB="6a00be00f414ed18beb5f4d10880d44165115bbf8e7506618730da4e6c62647ad25507cc2cf5868d61c38dda5d4e5e62542c5dc3ff5acdeb0aa15e03d3949480afd6b1e585382f20fae6814e76b842e01513a6d9a8a296e511625bedc7962ed95fc048662e47d8c933dc00004c00810005000200000000000500010001000000050001006d00000005000100d60000000500020005000000050002000700000005000200080000000500010005000000050001000900000008001400", @ANYRES32=r5, @ANYBLOB="0500e40001000000"], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x0, 0x401}]}, 0x10) [ 2651.875685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:24:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x2000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:24:50 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 40) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:24:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x5, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = signalfd(0xffffffffffffffff, &(0x7f0000000440)={[0x3]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f0000000400), 0x40, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@dont_hash}, {@dont_measure}]}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r3 = openat(r1, &(0x7f0000000480)='./file0\x00', 0x0, 0xc) futimesat(r3, &(0x7f0000000000)='./mnt\x00', 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5}, 'mnt/encrypted_dir\x00'}) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x5b) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 14:24:50 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x6f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) unlink(&(0x7f0000000300)='./file0/file0\x00') [ 2652.068251] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2652.128039] FAULT_INJECTION: forcing a failure. [ 2652.128039] name failslab, interval 1, probability 0, space 0, times 0 [ 2652.130511] CPU: 1 PID: 26349 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2652.132162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2652.133985] Call Trace: [ 2652.134625] dump_stack+0x107/0x167 [ 2652.135407] should_fail.cold+0x5/0xa [ 2652.136325] ? create_object.isra.0+0x3a/0xa20 [ 2652.137296] should_failslab+0x5/0x20 [ 2652.138217] kmem_cache_alloc+0x5b/0x310 [ 2652.139097] create_object.isra.0+0x3a/0xa20 [ 2652.140157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2652.141251] kmem_cache_alloc_node+0x169/0x330 [ 2652.142364] __alloc_skb+0x6d/0x5b0 [ 2652.143160] __ip_append_data+0x2930/0x3310 [ 2652.144215] ? raw_destroy+0x30/0x30 [ 2652.145030] ? ip_finish_output+0x330/0x330 [ 2652.145967] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2652.147188] ? ipv4_mtu+0x1ed/0x2c0 [ 2652.147964] ? raw_destroy+0x30/0x30 [ 2652.148881] ip_append_data+0x114/0x1a0 [ 2652.149769] raw_sendmsg+0xaa6/0x29d0 [ 2652.150703] ? dst_output+0x170/0x170 [ 2652.151610] ? __lock_acquire+0x1657/0x5b00 [ 2652.152735] ? perf_trace_lock+0xac/0x490 [ 2652.153681] ? SOFTIRQ_verbose+0x10/0x10 [ 2652.154515] ? create_object.isra.0+0x3ad/0xa20 [ 2652.155723] ? __lockdep_reset_lock+0x180/0x180 [ 2652.156813] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2652.158096] ? find_held_lock+0x2c/0x110 [ 2652.159010] ? trace_hardirqs_on+0x5b/0x180 [ 2652.160120] ? dst_output+0x170/0x170 [ 2652.160987] inet_sendmsg+0x11d/0x140 [ 2652.161984] ? inet_send_prepare+0x540/0x540 [ 2652.163028] __sock_sendmsg+0x13c/0x190 [ 2652.163880] ____sys_sendmsg+0x334/0x870 [ 2652.164693] ? sock_write_iter+0x3d0/0x3d0 [ 2652.165607] ? do_recvmmsg+0x6d0/0x6d0 [ 2652.166512] ? perf_trace_lock+0xac/0x490 [ 2652.167351] ? __lockdep_reset_lock+0x180/0x180 [ 2652.168289] ? perf_trace_lock+0xac/0x490 [ 2652.169206] ___sys_sendmsg+0xf3/0x170 [ 2652.169993] ? sendmsg_copy_msghdr+0x160/0x160 [ 2652.171005] ? lock_downgrade+0x6d0/0x6d0 [ 2652.171930] ? lock_downgrade+0x6d0/0x6d0 [ 2652.172776] ? __fget_files+0x296/0x4c0 [ 2652.173613] ? __fget_light+0xea/0x290 [ 2652.174480] __sys_sendmmsg+0x195/0x470 [ 2652.175315] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2652.176275] ? lock_downgrade+0x6d0/0x6d0 [ 2652.177238] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2652.178216] ? wait_for_completion_io+0x270/0x270 [ 2652.179189] ? rcu_read_lock_any_held+0x75/0xa0 [ 2652.180199] ? vfs_write+0x354/0xa70 [ 2652.181040] ? fput_many+0x2f/0x1a0 [ 2652.181790] ? ksys_write+0x1a9/0x260 [ 2652.182559] ? __ia32_sys_read+0xb0/0xb0 [ 2652.183390] __x64_sys_sendmmsg+0x99/0x100 [ 2652.184297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2652.185475] do_syscall_64+0x33/0x40 [ 2652.186257] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2652.187355] RIP: 0033:0x7f70f6d55b19 [ 2652.188145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2652.192075] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2652.193708] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2652.195279] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2652.196709] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2652.198212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2652.199709] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2652.385052] 9pnet: Insufficient options for proto=fd 14:25:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 41) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:25:08 executing program 3: syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x8}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r3, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r3, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000001300)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x14, 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4af9, &(0x7f0000000080)={0x0, 0x871, 0x8, 0x2, 0x135}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000012c0)=@IORING_OP_WRITE={0x17, 0x3, 0x4004, @fd_index=0x2, 0x7ff, &(0x7f00000002c0)="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", 0x1000, 0x8, 0x1}, 0xf359) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="24008000", @ANYRES16=r8, @ANYBLOB="010000dd864d20000000250037000005000200ba80da353d2c18a832e6b713515f0d1ef6b455ac2c81b6bf06", @ANYRES32=r10, @ANYBLOB="b67125222bab6faa684a54ce05002b007b"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225bd7000fedbdfff0f00008700e6ff2b00b90e0000080024000c7000007c7144fa758527c1987dcbe0893ef52d26812236a013c4f1174738cd44fe9be9ef573928825801fdb015243a383d70932b42355e66a1ebbcda582c767ee4605f0313c42322b05fce59"], 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000048) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2669.148502] FAULT_INJECTION: forcing a failure. [ 2669.148502] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.151399] CPU: 1 PID: 26450 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2669.153079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2669.155060] Call Trace: [ 2669.155697] dump_stack+0x107/0x167 [ 2669.156577] should_fail.cold+0x5/0xa [ 2669.157515] should_failslab+0x5/0x20 [ 2669.158451] __kmalloc_node_track_caller+0x74/0x3b0 [ 2669.159646] ? __ip_append_data+0x2930/0x3310 [ 2669.160726] __alloc_skb+0xb1/0x5b0 [ 2669.161621] __ip_append_data+0x2930/0x3310 [ 2669.162674] ? raw_destroy+0x30/0x30 [ 2669.163579] ? ip_finish_output+0x330/0x330 [ 2669.164600] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2669.165831] ? ipv4_mtu+0x1ed/0x2c0 14:25:08 executing program 6: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/186) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r3 = syz_io_uring_complete(0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000100)=0x800, 0x2, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="8345b274b4e430bf0000000000000000ffffffff000000000000000000000000ff0200"/59, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="0000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001604000000000000f3ffffff0000000001000000bd454c6d00"/116, @ANYRESOCT, @ANYRES64=r5], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) dup2(r0, r6) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r4}) 14:25:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:25:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x3000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:25:08 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat2(r0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580)={0x101200, 0xf, 0x1}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:25:08 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/pci_bus', 0x90000, 0x43) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8001}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/521], 0x410) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000005, 0x80010, 0xffffffffffffffff, 0x78ce4000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, 0x0, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25", 0x17}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5500, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r0, 0x0, 0x70) fcntl$setown(r0, 0x8, r1) migrate_pages(r1, 0x4000000000099bb, 0x0, &(0x7f0000000240)=0x4) [ 2669.166907] ? raw_destroy+0x30/0x30 [ 2669.167914] ip_append_data+0x114/0x1a0 [ 2669.168880] raw_sendmsg+0xaa6/0x29d0 [ 2669.169815] ? dst_output+0x170/0x170 [ 2669.170718] ? __lock_acquire+0x1657/0x5b00 [ 2669.171765] ? perf_trace_lock+0xac/0x490 [ 2669.172748] ? SOFTIRQ_verbose+0x10/0x10 [ 2669.173731] ? create_object.isra.0+0x3ad/0xa20 [ 2669.174839] ? __lockdep_reset_lock+0x180/0x180 [ 2669.175987] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2669.177205] ? find_held_lock+0x2c/0x110 [ 2669.178185] ? trace_hardirqs_on+0x5b/0x180 [ 2669.179204] ? dst_output+0x170/0x170 [ 2669.180097] inet_sendmsg+0x11d/0x140 [ 2669.180987] ? inet_send_prepare+0x540/0x540 [ 2669.182033] __sock_sendmsg+0x13c/0x190 [ 2669.182963] ____sys_sendmsg+0x334/0x870 [ 2669.183916] ? sock_write_iter+0x3d0/0x3d0 [ 2669.184900] ? do_recvmmsg+0x6d0/0x6d0 [ 2669.185817] ? perf_trace_lock+0xac/0x490 [ 2669.186796] ? __lockdep_reset_lock+0x180/0x180 [ 2669.187879] ? perf_trace_lock+0xac/0x490 [ 2669.188854] ___sys_sendmsg+0xf3/0x170 [ 2669.189774] ? sendmsg_copy_msghdr+0x160/0x160 [ 2669.190848] ? lock_downgrade+0x6d0/0x6d0 [ 2669.191826] ? lock_downgrade+0x6d0/0x6d0 [ 2669.192802] ? __fget_files+0x296/0x4c0 [ 2669.193764] ? __fget_light+0xea/0x290 [ 2669.194675] __sys_sendmmsg+0x195/0x470 [ 2669.195603] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2669.196600] ? lock_downgrade+0x6d0/0x6d0 [ 2669.197592] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2669.198712] ? wait_for_completion_io+0x270/0x270 [ 2669.199829] ? rcu_read_lock_any_held+0x75/0xa0 [ 2669.200899] ? vfs_write+0x354/0xa70 [ 2669.201788] ? fput_many+0x2f/0x1a0 [ 2669.202632] ? ksys_write+0x1a9/0x260 [ 2669.203528] ? __ia32_sys_read+0xb0/0xb0 [ 2669.204478] __x64_sys_sendmmsg+0x99/0x100 [ 2669.205475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2669.206667] do_syscall_64+0x33/0x40 [ 2669.207542] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2669.208726] RIP: 0033:0x7f70f6d55b19 [ 2669.209586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.213792] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2669.215526] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2669.217166] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2669.218792] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2669.220416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2669.222059] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2669.269796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2669.272928] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:25:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x4000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2669.379347] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:25:08 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:25:08 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="81000031010000000046de26", @ANYRES32=r0]) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) write(r0, &(0x7f0000000540), 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x100c5, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@uname={'uname', 0x3d, '{'}}], [{@obj_type={'obj_type', 0x3d, '{{^$'}}, {@uid_gt={'uid>', r1}}, {@euid_lt={'euid<', r1}}, {@hash}, {@permit_directio}, {@appraise}, {@appraise}, {@obj_type={'obj_type', 0x3d, '@&[&'}}]}}) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x6, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000600)='./file1/file0\x00', 0x101) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x106, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 14:25:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x5000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:25:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 42) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2669.519488] audit: type=1326 audit(138308.417:189): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2669.531915] audit: type=1326 audit(138308.417:190): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2669.544609] audit: type=1326 audit(138308.430:191): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2669.547655] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2669.570013] audit: type=1326 audit(138308.439:192): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 14:25:08 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2669.589356] audit: type=1326 audit(138308.457:193): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2669.603965] audit: type=1326 audit(138308.460:194): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2669.623502] audit: type=1326 audit(138308.460:195): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe162a9b19 code=0x7ffc0000 [ 2669.624752] FAULT_INJECTION: forcing a failure. [ 2669.624752] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.630645] CPU: 0 PID: 26482 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2669.632177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2669.634019] Call Trace: [ 2669.634602] dump_stack+0x107/0x167 [ 2669.635430] should_fail.cold+0x5/0xa [ 2669.636279] ? __alloc_skb+0x6d/0x5b0 [ 2669.637147] should_failslab+0x5/0x20 [ 2669.637978] kmem_cache_alloc_node+0x55/0x330 [ 2669.638972] __alloc_skb+0x6d/0x5b0 [ 2669.639784] __ip_append_data+0x2930/0x3310 [ 2669.640753] ? raw_destroy+0x30/0x30 [ 2669.641611] ? ip_finish_output+0x330/0x330 [ 2669.642563] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2669.643694] ? ipv4_mtu+0x1ed/0x2c0 [ 2669.644509] ? raw_destroy+0x30/0x30 [ 2669.645339] ip_append_data+0x114/0x1a0 [ 2669.646238] raw_sendmsg+0xaa6/0x29d0 [ 2669.647105] ? dst_output+0x170/0x170 [ 2669.647928] ? __lock_acquire+0x1657/0x5b00 [ 2669.648897] ? perf_trace_lock+0xac/0x490 [ 2669.649835] ? SOFTIRQ_verbose+0x10/0x10 [ 2669.650728] ? create_object.isra.0+0x3ad/0xa20 [ 2669.651759] ? __lockdep_reset_lock+0x180/0x180 [ 2669.652800] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2669.653951] ? find_held_lock+0x2c/0x110 [ 2669.654867] ? trace_hardirqs_on+0x5b/0x180 [ 2669.655821] ? dst_output+0x170/0x170 [ 2669.656667] inet_sendmsg+0x11d/0x140 [ 2669.657514] ? inet_send_prepare+0x540/0x540 [ 2669.658481] __sock_sendmsg+0x13c/0x190 [ 2669.659353] ____sys_sendmsg+0x334/0x870 [ 2669.660257] ? sock_write_iter+0x3d0/0x3d0 [ 2669.661187] ? do_recvmmsg+0x6d0/0x6d0 [ 2669.662043] ? perf_trace_lock+0xac/0x490 [ 2669.662978] ? __lockdep_reset_lock+0x180/0x180 [ 2669.664003] ? perf_trace_lock+0xac/0x490 [ 2669.664930] ___sys_sendmsg+0xf3/0x170 [ 2669.665800] ? sendmsg_copy_msghdr+0x160/0x160 [ 2669.666817] ? lock_downgrade+0x6d0/0x6d0 [ 2669.667745] ? lock_downgrade+0x6d0/0x6d0 [ 2669.668666] ? __fget_files+0x296/0x4c0 [ 2669.669565] ? __fget_light+0xea/0x290 [ 2669.670450] __sys_sendmmsg+0x195/0x470 [ 2669.671329] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2669.672301] ? lock_downgrade+0x6d0/0x6d0 [ 2669.673257] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2669.674327] ? wait_for_completion_io+0x270/0x270 [ 2669.675400] ? rcu_read_lock_any_held+0x75/0xa0 [ 2669.676416] ? vfs_write+0x354/0xa70 [ 2669.677262] ? fput_many+0x2f/0x1a0 [ 2669.678059] ? ksys_write+0x1a9/0x260 [ 2669.678917] ? __ia32_sys_read+0xb0/0xb0 [ 2669.679818] __x64_sys_sendmmsg+0x99/0x100 [ 2669.680758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2669.681918] do_syscall_64+0x33/0x40 [ 2669.682740] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2669.683877] RIP: 0033:0x7f70f6d55b19 [ 2669.684714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.688773] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2669.690470] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2669.692043] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2669.693864] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2669.695730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2669.697650] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:25:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x6000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:25:08 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8990, &(0x7f0000000ac0)={'wpan0\x00'}) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbb55838ea07b3806}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x11) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000011300)=ANY=[@ANYBLOB]) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0xdfc, 0x0, 0x2, 0x0, 0x1, [{0xffffffffffffffc0, 0x7e2}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) fcntl$setpipe(r3, 0x407, 0xdeea) syz_genetlink_get_family_id$tipc(0x0, r3) 14:25:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa108c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="623000002000212c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0c0011000000000000000000"], 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x10000) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000880)={0x100000001, 0x2, 0x1, 0x2, 0x6, [{0x2, 0x80, 0x101, '\x00', 0x2}, {0x6, 0x4, 0x400, '\x00', 0x481}, {0x9, 0x2, 0xfffffffffffffff7, '\x00', 0x80}, {0x9ac, 0x0, 0x4, '\x00', 0x300}, {0x80000000, 0xdf, 0xfffffffffffffffa, '\x00', 0x100e}, {0x1, 0x30fa5797, 0x2570527e, '\x00', 0x131c}]}) [ 2669.841755] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:25:08 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:25:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 43) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:25:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x7000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2670.003233] FAULT_INJECTION: forcing a failure. [ 2670.003233] name failslab, interval 1, probability 0, space 0, times 0 [ 2670.005656] CPU: 1 PID: 26598 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2670.007086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.008803] Call Trace: [ 2670.009366] dump_stack+0x107/0x167 [ 2670.010145] should_fail.cold+0x5/0xa [ 2670.010931] ? __alloc_skb+0x6d/0x5b0 [ 2670.011716] should_failslab+0x5/0x20 [ 2670.012499] kmem_cache_alloc_node+0x55/0x330 [ 2670.013450] __alloc_skb+0x6d/0x5b0 [ 2670.014216] __ip_append_data+0x2930/0x3310 [ 2670.015118] ? raw_destroy+0x30/0x30 [ 2670.015916] ? ip_finish_output+0x330/0x330 [ 2670.016807] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2670.017886] ? ipv4_mtu+0x1ed/0x2c0 [ 2670.018638] ? raw_destroy+0x30/0x30 [ 2670.019412] ip_append_data+0x114/0x1a0 [ 2670.020243] raw_sendmsg+0xaa6/0x29d0 [ 2670.021042] ? dst_output+0x170/0x170 [ 2670.021856] ? __lock_acquire+0x1657/0x5b00 [ 2670.022764] ? perf_trace_lock+0xac/0x490 [ 2670.023636] ? SOFTIRQ_verbose+0x10/0x10 [ 2670.024471] ? create_object.isra.0+0x3ad/0xa20 [ 2670.025450] ? __lockdep_reset_lock+0x180/0x180 [ 2670.026429] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2670.027497] ? find_held_lock+0x2c/0x110 [ 2670.028353] ? trace_hardirqs_on+0x5b/0x180 [ 2670.029271] ? dst_output+0x170/0x170 [ 2670.030055] inet_sendmsg+0x11d/0x140 [ 2670.030848] ? inet_send_prepare+0x540/0x540 [ 2670.031756] __sock_sendmsg+0x13c/0x190 [ 2670.032591] ____sys_sendmsg+0x334/0x870 [ 2670.033463] ? sock_write_iter+0x3d0/0x3d0 [ 2670.034343] ? do_recvmmsg+0x6d0/0x6d0 [ 2670.035161] ? perf_trace_lock+0xac/0x490 [ 2670.036031] ? __lockdep_reset_lock+0x180/0x180 [ 2670.037013] ? perf_trace_lock+0xac/0x490 [ 2670.037890] ___sys_sendmsg+0xf3/0x170 [ 2670.038719] ? sendmsg_copy_msghdr+0x160/0x160 [ 2670.039678] ? lock_downgrade+0x6d0/0x6d0 [ 2670.040578] ? lock_downgrade+0x6d0/0x6d0 [ 2670.041499] ? __fget_files+0x296/0x4c0 [ 2670.042380] ? __fget_light+0xea/0x290 [ 2670.043204] __sys_sendmmsg+0x195/0x470 [ 2670.044039] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2670.044933] ? lock_downgrade+0x6d0/0x6d0 [ 2670.045879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2670.046935] ? wait_for_completion_io+0x270/0x270 [ 2670.047930] ? rcu_read_lock_any_held+0x75/0xa0 [ 2670.048872] ? vfs_write+0x354/0xa70 [ 2670.049701] ? fput_many+0x2f/0x1a0 [ 2670.050477] ? ksys_write+0x1a9/0x260 [ 2670.051300] ? __ia32_sys_read+0xb0/0xb0 [ 2670.052141] __x64_sys_sendmmsg+0x99/0x100 [ 2670.053012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2670.054083] do_syscall_64+0x33/0x40 [ 2670.054853] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2670.055934] RIP: 0033:0x7f70f6d55b19 [ 2670.056770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.060628] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2670.062239] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2670.063716] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2670.065199] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2670.066674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2670.068146] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:25:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) [ 2670.150243] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:25:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={@private1, @dev={0xfe, 0x80, '\x00', 0x3b}, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc, 0x3, 0x0, 0x400, 0x200, 0x200202, r5}) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, 0x4a, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}, [@generic="65eed358f4"]}, 0x1c}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) 14:25:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:25:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 14:25:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x9000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:25:09 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 44) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2670.344640] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2670.454191] FAULT_INJECTION: forcing a failure. [ 2670.454191] name failslab, interval 1, probability 0, space 0, times 0 [ 2670.456824] CPU: 0 PID: 26650 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2670.458387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.460257] Call Trace: [ 2670.460854] dump_stack+0x107/0x167 [ 2670.461713] should_fail.cold+0x5/0xa [ 2670.462571] ? create_object.isra.0+0x3a/0xa20 [ 2670.463603] should_failslab+0x5/0x20 [ 2670.464449] kmem_cache_alloc+0x5b/0x310 [ 2670.465414] create_object.isra.0+0x3a/0xa20 [ 2670.466388] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2670.467517] kmem_cache_alloc_node+0x169/0x330 [ 2670.468536] __alloc_skb+0x6d/0x5b0 [ 2670.469364] __ip_append_data+0x2930/0x3310 [ 2670.470339] ? raw_destroy+0x30/0x30 [ 2670.471206] ? ip_finish_output+0x330/0x330 [ 2670.472156] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2670.473298] ? ipv4_mtu+0x1ed/0x2c0 [ 2670.474115] ? raw_destroy+0x30/0x30 [ 2670.474945] ip_append_data+0x114/0x1a0 [ 2670.475842] raw_sendmsg+0xaa6/0x29d0 [ 2670.476705] ? dst_output+0x170/0x170 [ 2670.477556] ? __lock_acquire+0x1657/0x5b00 [ 2670.478536] ? perf_trace_lock+0xac/0x490 [ 2670.479452] ? SOFTIRQ_verbose+0x10/0x10 [ 2670.480352] ? create_object.isra.0+0x3ad/0xa20 [ 2670.481380] ? __lockdep_reset_lock+0x180/0x180 [ 2670.482419] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2670.483547] ? find_held_lock+0x2c/0x110 [ 2670.484467] ? trace_hardirqs_on+0x5b/0x180 [ 2670.485435] ? dst_output+0x170/0x170 [ 2670.486285] inet_sendmsg+0x11d/0x140 [ 2670.487121] ? inet_send_prepare+0x540/0x540 [ 2670.488088] __sock_sendmsg+0x13c/0x190 [ 2670.488961] ____sys_sendmsg+0x334/0x870 [ 2670.489874] ? sock_write_iter+0x3d0/0x3d0 [ 2670.490801] ? do_recvmmsg+0x6d0/0x6d0 [ 2670.491660] ? perf_trace_lock+0xac/0x490 [ 2670.492575] ? __lockdep_reset_lock+0x180/0x180 [ 2670.493609] ? perf_trace_lock+0xac/0x490 [ 2670.494526] ___sys_sendmsg+0xf3/0x170 [ 2670.495384] ? sendmsg_copy_msghdr+0x160/0x160 [ 2670.496395] ? lock_downgrade+0x6d0/0x6d0 [ 2670.497334] ? lock_downgrade+0x6d0/0x6d0 [ 2670.498244] ? __fget_files+0x296/0x4c0 [ 2670.499122] ? __fget_light+0xea/0x290 [ 2670.499981] __sys_sendmmsg+0x195/0x470 [ 2670.500859] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2670.501802] ? lock_downgrade+0x6d0/0x6d0 [ 2670.502727] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2670.503777] ? wait_for_completion_io+0x270/0x270 [ 2670.504825] ? rcu_read_lock_any_held+0x75/0xa0 [ 2670.505850] ? vfs_write+0x354/0xa70 [ 2670.506668] ? fput_many+0x2f/0x1a0 [ 2670.507465] ? ksys_write+0x1a9/0x260 [ 2670.508296] ? __ia32_sys_read+0xb0/0xb0 [ 2670.509195] __x64_sys_sendmmsg+0x99/0x100 [ 2670.510116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2670.511243] do_syscall_64+0x33/0x40 [ 2670.512053] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2670.513191] RIP: 0033:0x7f70f6d55b19 [ 2670.514144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.518818] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2670.520752] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2670.522587] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2670.524404] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2670.526223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2670.528041] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:25:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xa000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:25:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x8000000) openat(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x82) r2 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0xc0000000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0xff4c, 0x0, 0x0}, 0x58) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001140)={{r3}, 0x0, 0xe, @unused=[0x6, 0x9, 0xa6, 0x5], @devid}) 14:25:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 14:25:26 executing program 1: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1], 0x48, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:25:26 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 45) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:25:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:25:26 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x46e2, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000500)={0x2}) dup2(0xffffffffffffffff, 0xffffffffffffffff) flock(r0, 0xe) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000a00)=@v3={0x3000000, [{0x3f, 0x7}, {0x9, 0x2}]}, 0x18, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 14:25:26 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x420000, 0x0) close(r2) dup3(r1, r0, 0x0) [ 2687.406379] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2687.474332] FAULT_INJECTION: forcing a failure. [ 2687.474332] name failslab, interval 1, probability 0, space 0, times 0 [ 2687.477310] CPU: 0 PID: 26740 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2687.478812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2687.480612] Call Trace: [ 2687.481190] dump_stack+0x107/0x167 [ 2687.482000] should_fail.cold+0x5/0xa [ 2687.482832] ? create_object.isra.0+0x3a/0xa20 [ 2687.483827] should_failslab+0x5/0x20 [ 2687.484655] kmem_cache_alloc+0x5b/0x310 [ 2687.485569] create_object.isra.0+0x3a/0xa20 [ 2687.486524] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2687.487633] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2687.488731] ? __ip_append_data+0x2930/0x3310 [ 2687.489722] __alloc_skb+0xb1/0x5b0 [ 2687.490518] __ip_append_data+0x2930/0x3310 [ 2687.491475] ? raw_destroy+0x30/0x30 [ 2687.492302] ? ip_finish_output+0x330/0x330 [ 2687.493237] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2687.494347] ? ipv4_mtu+0x1ed/0x2c0 [ 2687.495140] ? raw_destroy+0x30/0x30 [ 2687.495943] ip_append_data+0x114/0x1a0 [ 2687.496817] raw_sendmsg+0xaa6/0x29d0 [ 2687.497673] ? dst_output+0x170/0x170 [ 2687.498501] ? __lock_acquire+0x1657/0x5b00 [ 2687.499461] ? perf_trace_lock+0xac/0x490 [ 2687.500359] ? SOFTIRQ_verbose+0x10/0x10 [ 2687.501238] ? create_object.isra.0+0x3ad/0xa20 [ 2687.502259] ? __lockdep_reset_lock+0x180/0x180 [ 2687.503284] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2687.504395] ? find_held_lock+0x2c/0x110 [ 2687.505304] ? trace_hardirqs_on+0x5b/0x180 [ 2687.506245] ? dst_output+0x170/0x170 14:25:26 executing program 2: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe3dfbe54a4405e3, 0xffffffffffffffff) r0 = fork() munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) ptrace$setopts(0x4206, r0, 0x4, 0x44) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0xffffffffffffffff) [ 2687.507074] inet_sendmsg+0x11d/0x140 [ 2687.508034] ? inet_send_prepare+0x540/0x540 [ 2687.508985] __sock_sendmsg+0x13c/0x190 [ 2687.509863] ____sys_sendmsg+0x334/0x870 [ 2687.510745] ? sock_write_iter+0x3d0/0x3d0 [ 2687.511656] ? do_recvmmsg+0x6d0/0x6d0 [ 2687.512498] ? perf_trace_lock+0xac/0x490 [ 2687.513411] ? __lockdep_reset_lock+0x180/0x180 [ 2687.514415] ? perf_trace_lock+0xac/0x490 [ 2687.515318] ___sys_sendmsg+0xf3/0x170 [ 2687.516163] ? sendmsg_copy_msghdr+0x160/0x160 [ 2687.517155] ? lock_downgrade+0x6d0/0x6d0 [ 2687.518079] ? lock_downgrade+0x6d0/0x6d0 [ 2687.518984] ? __fget_files+0x296/0x4c0 [ 2687.519862] ? __fget_light+0xea/0x290 [ 2687.520715] __sys_sendmmsg+0x195/0x470 [ 2687.521593] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2687.522526] ? lock_downgrade+0x6d0/0x6d0 [ 2687.523455] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2687.524504] ? wait_for_completion_io+0x270/0x270 [ 2687.525566] ? rcu_read_lock_any_held+0x75/0xa0 [ 2687.526568] ? vfs_write+0x354/0xa70 [ 2687.527379] ? fput_many+0x2f/0x1a0 [ 2687.528167] ? ksys_write+0x1a9/0x260 [ 2687.528991] ? __ia32_sys_read+0xb0/0xb0 [ 2687.529889] __x64_sys_sendmmsg+0x99/0x100 [ 2687.530804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2687.531922] do_syscall_64+0x33/0x40 [ 2687.532726] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2687.533848] RIP: 0033:0x7f70f6d55b19 [ 2687.534656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2687.538627] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2687.540270] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2687.541835] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2687.543379] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2687.544941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2687.546504] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:25:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="3e8bec941a846a8f8e708dd8c28026f7dde537c170683fe8bf", 0x19}, {&(0x7f0000000180)="b36122a34cf2098276a06e90e90b9d72e888204c96b95ffffd60aabe9aaea6033067d6906a3e392adc8f676e1f935c48e3ef16d8f672de27e6841a18f5789d6a03cc7349e798a259e3ca63917cd3f7c587aede27aea38ababbf63834", 0x5c}], 0x2, 0x5, 0x800) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) fsync(r3) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 14:25:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xf000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:25:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 14:25:44 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 46) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2705.277728] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:25:44 executing program 6: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x179) open(&(0x7f0000000140)='./file1\x00', 0x80, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bind$bt_hci(r0, 0x0, 0x0) umount2(&(0x7f0000000280)='./file1\x00', 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat2(r0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x40000, 0x100, 0x5}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000700)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r1, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 14:25:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:25:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:25:44 executing program 1: statx(0xffffffffffffffff, 0x0, 0x100, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0x14c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x103080, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="000000000000ed000a00000f"], 0x1c}}, 0x0) splice(r3, &(0x7f0000000180)=0xc6f7, r4, &(0x7f0000000300)=0x5, 0x2, 0xe) fcntl$setstatus(r2, 0x407, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r6, &(0x7f0000001380)) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000580), 0x2284090, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname}, {@posixacl}, {@nodevmap}, {@version_9p2000}, {@version_u}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@afid={'afid', 0x3d, 0x7}}, {@loose}, {@dfltgid={'dfltgid', 0x3d, r1}}], [{@dont_appraise}, {@subj_type={'subj_type', 0x3d, '/dev/random\x00'}}, {@euid_gt={'euid>', r6}}, {@euid_lt={'euid<', r0}}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) splice(r3, &(0x7f0000000080)=0xc89d, r2, &(0x7f00000000c0)=0x3, 0x6, 0x3) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000003d00210c000000000000000236c3c5bd97083f4d4023704a0400020008000c000100000076096b3d60acf53cac693712cf2e8a68994d823b038cc39c2015e6f2f90abc7bb852515b9dfa28131e7eb42fbea7555aa4663eed493af7348c3b43569f6ce2"], 0x1c}}, 0x0) [ 2705.304142] FAULT_INJECTION: forcing a failure. [ 2705.304142] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.305702] CPU: 0 PID: 26970 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2705.306594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.307659] Call Trace: [ 2705.308012] dump_stack+0x107/0x167 [ 2705.308490] should_fail.cold+0x5/0xa [ 2705.308986] ? __alloc_skb+0x6d/0x5b0 [ 2705.309483] should_failslab+0x5/0x20 [ 2705.309986] kmem_cache_alloc_node+0x55/0x330 [ 2705.310576] __alloc_skb+0x6d/0x5b0 [ 2705.311056] __ip_append_data+0x2930/0x3310 [ 2705.311692] ? raw_destroy+0x30/0x30 [ 2705.312185] ? ip_finish_output+0x330/0x330 [ 2705.312744] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2705.313399] ? ipv4_mtu+0x1ed/0x2c0 [ 2705.313921] ? raw_destroy+0x30/0x30 [ 2705.314434] ip_append_data+0x114/0x1a0 [ 2705.314985] raw_sendmsg+0xaa6/0x29d0 [ 2705.315526] ? dst_output+0x170/0x170 [ 2705.316043] ? __lock_acquire+0x1657/0x5b00 [ 2705.316653] ? perf_trace_lock+0xac/0x490 [ 2705.317247] ? SOFTIRQ_verbose+0x10/0x10 [ 2705.317849] ? create_object.isra.0+0x3ad/0xa20 [ 2705.318524] ? __lockdep_reset_lock+0x180/0x180 [ 2705.319211] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2705.319954] ? find_held_lock+0x2c/0x110 [ 2705.320547] ? trace_hardirqs_on+0x5b/0x180 [ 2705.321161] ? dst_output+0x170/0x170 [ 2705.321718] inet_sendmsg+0x11d/0x140 [ 2705.322260] ? inet_send_prepare+0x540/0x540 [ 2705.322884] __sock_sendmsg+0x13c/0x190 [ 2705.323447] ____sys_sendmsg+0x334/0x870 [ 2705.324032] ? sock_write_iter+0x3d0/0x3d0 [ 2705.324629] ? do_recvmmsg+0x6d0/0x6d0 [ 2705.325180] ? perf_trace_lock+0xac/0x490 [ 2705.325785] ? __lockdep_reset_lock+0x180/0x180 [ 2705.326440] ? perf_trace_lock+0xac/0x490 [ 2705.327033] ___sys_sendmsg+0xf3/0x170 [ 2705.327587] ? sendmsg_copy_msghdr+0x160/0x160 [ 2705.328238] ? lock_downgrade+0x6d0/0x6d0 [ 2705.328835] ? lock_downgrade+0x6d0/0x6d0 [ 2705.329423] ? __fget_files+0x296/0x4c0 [ 2705.330042] ? __fget_light+0xea/0x290 [ 2705.330602] __sys_sendmmsg+0x195/0x470 [ 2705.331172] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2705.331783] ? lock_downgrade+0x6d0/0x6d0 [ 2705.332382] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2705.333066] ? wait_for_completion_io+0x270/0x270 [ 2705.333763] ? rcu_read_lock_any_held+0x75/0xa0 [ 2705.334413] ? vfs_write+0x354/0xa70 [ 2705.334945] ? fput_many+0x2f/0x1a0 [ 2705.335458] ? ksys_write+0x1a9/0x260 [ 2705.336007] ? __ia32_sys_read+0xb0/0xb0 [ 2705.336610] __x64_sys_sendmmsg+0x99/0x100 [ 2705.337226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.337982] do_syscall_64+0x33/0x40 14:25:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x48000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2705.338513] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2705.339359] RIP: 0033:0x7f70f6d55b19 [ 2705.339885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.342530] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2705.343623] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2705.344640] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2705.345672] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2705.346704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2705.347745] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:25:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffffffffc4d, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) [ 2705.372418] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2705.399743] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:25:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 2705.589640] EXT4-fs (loop6): Unrecognized mount option "./file1" or missing value 14:26:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000340)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x20000000001e0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="756d61736b3d3030303030303030303030303030fd2f7fd108f20f3b303030c96e0aaf562d8ce8e265c835c7dd54f5a95a9d131f9b497d8d66000000"]) 14:26:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="6f4d6fbbc6d4ba4fa8fd7d749be262e50792f02b7b21bc2a2ecb7fc1b24352083552d5be50e0a0bde1eb440599a717ecab855d99a5cd89c224b363089a6af179f7c60130fe58243c52e12c7648e4211664af8c77999e1f129991b7b1ec6ba47825a3e51cbd202c48e279bb392e756a667a56aa7fde6820c270198b817bbc03780dda21bf4c76233a4320f8749673812a5ceda8d74325d5ed70b32135e191", 0x9e}], 0x1}, 0x4000040) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r2, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xda8, @any, 0x0, 0x2}, 0xe) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xa041, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) 14:26:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:26:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:26:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x4c000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:26:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r5, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'vlan1\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="c96f19de8c5de4832662090e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b56544badde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d7333e764182076079a2acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d82e7fb402597ac51c6a38eb00d27488eb840e0180918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a6136dbc7e57eea2d790755000000000000a2b3eb101b93c6141012daf489fd644d921bf03b9c50d3ce7dd80d0afa647eaca77eae59924f7dbccdd1cb0b587f5866aa445371", @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7"], 0xfdef) io_destroy(0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x0) fallocate(r1, 0x3, 0x3, 0x8000008000) 14:26:02 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 47) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:26:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 2723.630086] FAULT_INJECTION: forcing a failure. [ 2723.630086] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.632525] CPU: 0 PID: 27103 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2723.634017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2723.635801] Call Trace: [ 2723.636366] dump_stack+0x107/0x167 [ 2723.637141] should_fail.cold+0x5/0xa [ 2723.637982] ? create_object.isra.0+0x3a/0xa20 [ 2723.638974] should_failslab+0x5/0x20 [ 2723.639793] kmem_cache_alloc+0x5b/0x310 [ 2723.640672] create_object.isra.0+0x3a/0xa20 [ 2723.641620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2723.642734] kmem_cache_alloc_node+0x169/0x330 [ 2723.643729] __alloc_skb+0x6d/0x5b0 [ 2723.644521] __ip_append_data+0x2930/0x3310 [ 2723.645465] ? raw_destroy+0x30/0x30 [ 2723.646301] ? ip_finish_output+0x330/0x330 [ 2723.647234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2723.648327] ? ipv4_mtu+0x1ed/0x2c0 [ 2723.648817] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2723.649117] ? raw_destroy+0x30/0x30 [ 2723.649137] ip_append_data+0x114/0x1a0 [ 2723.649170] raw_sendmsg+0xaa6/0x29d0 [ 2723.653449] ? dst_output+0x170/0x170 [ 2723.654278] ? __lock_acquire+0x1657/0x5b00 [ 2723.655233] ? perf_trace_lock+0xac/0x490 [ 2723.656132] ? SOFTIRQ_verbose+0x10/0x10 [ 2723.656993] ? create_object.isra.0+0x3ad/0xa20 [ 2723.657995] ? __lockdep_reset_lock+0x180/0x180 [ 2723.658992] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2723.660087] ? find_held_lock+0x2c/0x110 [ 2723.660981] ? trace_hardirqs_on+0x5b/0x180 [ 2723.661935] ? dst_output+0x170/0x170 [ 2723.662747] inet_sendmsg+0x11d/0x140 [ 2723.663565] ? inet_send_prepare+0x540/0x540 [ 2723.664517] __sock_sendmsg+0x13c/0x190 [ 2723.665379] ____sys_sendmsg+0x334/0x870 [ 2723.666267] ? sock_write_iter+0x3d0/0x3d0 [ 2723.667174] ? do_recvmmsg+0x6d0/0x6d0 [ 2723.668019] ? perf_trace_lock+0xac/0x490 [ 2723.668921] ? __lockdep_reset_lock+0x180/0x180 [ 2723.669927] ? perf_trace_lock+0xac/0x490 [ 2723.670818] ___sys_sendmsg+0xf3/0x170 [ 2723.671666] ? sendmsg_copy_msghdr+0x160/0x160 [ 2723.672956] ? lock_downgrade+0x6d0/0x6d0 [ 2723.673923] ? lock_downgrade+0x6d0/0x6d0 [ 2723.674831] ? __fget_files+0x296/0x4c0 [ 2723.675690] ? __fget_light+0xea/0x290 [ 2723.676559] __sys_sendmmsg+0x195/0x470 [ 2723.677417] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2723.678355] ? lock_downgrade+0x6d0/0x6d0 [ 2723.679274] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2723.680306] ? wait_for_completion_io+0x270/0x270 [ 2723.681339] ? rcu_read_lock_any_held+0x75/0xa0 [ 2723.682349] ? vfs_write+0x354/0xa70 [ 2723.683147] ? fput_many+0x2f/0x1a0 [ 2723.683928] ? ksys_write+0x1a9/0x260 [ 2723.684752] ? __ia32_sys_read+0xb0/0xb0 [ 2723.685632] __x64_sys_sendmmsg+0x99/0x100 [ 2723.686552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2723.687660] do_syscall_64+0x33/0x40 [ 2723.688464] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2723.689573] RIP: 0033:0x7f70f6d55b19 [ 2723.690393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2723.694364] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2723.695997] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2723.697528] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2723.699050] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2723.700591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2723.702155] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:26:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 14:26:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daae655fdaf4655f0100ffff53ef010001000000d9f4655f030000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed", 0x1, 0x21fd}], 0x0, &(0x7f0000000280)=ANY=[]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) chown(&(0x7f0000000040)='./file0\x00', r0, 0xee01) 14:26:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x60000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:26:02 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 48) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:26:02 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0xfffffffe, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r0, 0x0, 0x70) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000300)={0x3, 0x9, 0x0, 0x0, 0x5, [{0x6, 0x1f, 0x2, '\x00', 0x100}, {0xfff, 0x3ff, 0x2378, '\x00', 0x400}, {0x9, 0xac45, 0x2, '\x00', 0x2600}, {0x0, 0x8000, 0x7, '\x00', 0x1500}, {0x2, 0x10001, 0x931, '\x00', 0x100}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00130002a50000000000000a00000f"], 0x1c}}, 0x0) fcntl$setown(r2, 0x8, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x8, 0x1f, 0x7, 0x0, 0x7fff, 0x80826, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x8001, 0x3, 0x1, 0x6, 0xeae8, 0x40000, 0x1, 0x0, 0x3ff}, r1, 0x3, r4, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r5, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) 14:26:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 2723.962129] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:26:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ftruncate(r0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x34, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x18, 0x4, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) accept(r1, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x80) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) [ 2723.991111] FAULT_INJECTION: forcing a failure. [ 2723.991111] name failslab, interval 1, probability 0, space 0, times 0 [ 2723.993853] CPU: 0 PID: 27217 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2723.995460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2723.997264] Call Trace: [ 2723.997867] dump_stack+0x107/0x167 [ 2723.998660] should_fail.cold+0x5/0xa [ 2723.999519] should_failslab+0x5/0x20 [ 2724.000364] __kmalloc_node_track_caller+0x74/0x3b0 [ 2724.001449] ? __ip_append_data+0x2930/0x3310 [ 2724.002465] __alloc_skb+0xb1/0x5b0 [ 2724.003261] __ip_append_data+0x2930/0x3310 [ 2724.004229] ? raw_destroy+0x30/0x30 [ 2724.005066] ? ip_finish_output+0x330/0x330 [ 2724.006028] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.007166] ? ipv4_mtu+0x1ed/0x2c0 [ 2724.007980] ? raw_destroy+0x30/0x30 [ 2724.008804] ip_append_data+0x114/0x1a0 [ 2724.009686] raw_sendmsg+0xaa6/0x29d0 [ 2724.010552] ? dst_output+0x170/0x170 [ 2724.011389] ? __lock_acquire+0x1657/0x5b00 [ 2724.012360] ? perf_trace_lock+0xac/0x490 [ 2724.013262] ? SOFTIRQ_verbose+0x10/0x10 [ 2724.014157] ? create_object.isra.0+0x3ad/0xa20 [ 2724.015177] ? __lockdep_reset_lock+0x180/0x180 [ 2724.016215] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2724.017335] ? find_held_lock+0x2c/0x110 [ 2724.018261] ? trace_hardirqs_on+0x5b/0x180 [ 2724.019213] ? dst_output+0x170/0x170 [ 2724.020049] inet_sendmsg+0x11d/0x140 [ 2724.020879] ? inet_send_prepare+0x540/0x540 [ 2724.021845] __sock_sendmsg+0x13c/0x190 [ 2724.022722] ____sys_sendmsg+0x334/0x870 [ 2724.023609] ? sock_write_iter+0x3d0/0x3d0 [ 2724.024520] ? do_recvmmsg+0x6d0/0x6d0 [ 2724.025375] ? perf_trace_lock+0xac/0x490 [ 2724.026295] ? __lockdep_reset_lock+0x180/0x180 [ 2724.027308] ? perf_trace_lock+0xac/0x490 [ 2724.028212] ___sys_sendmsg+0xf3/0x170 [ 2724.029072] ? sendmsg_copy_msghdr+0x160/0x160 [ 2724.030082] ? lock_downgrade+0x6d0/0x6d0 [ 2724.030989] ? lock_downgrade+0x6d0/0x6d0 [ 2724.031919] ? __fget_files+0x296/0x4c0 [ 2724.032824] ? __fget_light+0xea/0x290 [ 2724.033676] __sys_sendmmsg+0x195/0x470 [ 2724.034589] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2724.035524] ? lock_downgrade+0x6d0/0x6d0 [ 2724.036449] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2724.037510] ? wait_for_completion_io+0x270/0x270 [ 2724.038569] ? rcu_read_lock_any_held+0x75/0xa0 [ 2724.039576] ? vfs_write+0x354/0xa70 [ 2724.040396] ? fput_many+0x2f/0x1a0 [ 2724.041198] ? ksys_write+0x1a9/0x260 [ 2724.042041] ? __ia32_sys_read+0xb0/0xb0 [ 2724.042940] __x64_sys_sendmmsg+0x99/0x100 [ 2724.043862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.044983] do_syscall_64+0x33/0x40 [ 2724.045808] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2724.046921] RIP: 0033:0x7f70f6d55b19 [ 2724.047732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.051735] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2724.053395] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2724.054973] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2724.056527] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2724.058105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.059700] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2724.110442] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 2724.126936] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 14:26:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0, 0x2007008, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x2100000, &(0x7f0000000200)={[{@subsystem='freezer'}, {}], [{@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, 'clone_children'}}, {@hash}]}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 14:26:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x68000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:26:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:26:03 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:26:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 14:26:03 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 49) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2724.233485] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2724.407006] FAULT_INJECTION: forcing a failure. [ 2724.407006] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.409702] CPU: 0 PID: 27327 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2724.411273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.413086] Call Trace: [ 2724.413655] dump_stack+0x107/0x167 [ 2724.414468] should_fail.cold+0x5/0xa [ 2724.415330] ? create_object.isra.0+0x3a/0xa20 [ 2724.416333] should_failslab+0x5/0x20 [ 2724.417159] kmem_cache_alloc+0x5b/0x310 [ 2724.418063] create_object.isra.0+0x3a/0xa20 [ 2724.419024] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.420144] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2724.421239] ? __ip_append_data+0x2930/0x3310 [ 2724.422243] __alloc_skb+0xb1/0x5b0 [ 2724.423040] __ip_append_data+0x2930/0x3310 [ 2724.423987] ? raw_destroy+0x30/0x30 [ 2724.424802] ? ip_finish_output+0x330/0x330 [ 2724.425750] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.426836] ? ipv4_mtu+0x1ed/0x2c0 [ 2724.427625] ? raw_destroy+0x30/0x30 [ 2724.428426] ip_append_data+0x114/0x1a0 [ 2724.429295] raw_sendmsg+0xaa6/0x29d0 [ 2724.430144] ? dst_output+0x170/0x170 [ 2724.430969] ? __lock_acquire+0x1657/0x5b00 [ 2724.431921] ? perf_trace_lock+0xac/0x490 [ 2724.432813] ? SOFTIRQ_verbose+0x10/0x10 [ 2724.433682] ? create_object.isra.0+0x3ad/0xa20 [ 2724.434697] ? __lockdep_reset_lock+0x180/0x180 [ 2724.435720] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2724.436838] ? find_held_lock+0x2c/0x110 [ 2724.437761] ? trace_hardirqs_on+0x5b/0x180 [ 2724.438703] ? dst_output+0x170/0x170 [ 2724.439525] inet_sendmsg+0x11d/0x140 [ 2724.440353] ? inet_send_prepare+0x540/0x540 [ 2724.441298] __sock_sendmsg+0x13c/0x190 [ 2724.442166] ____sys_sendmsg+0x334/0x870 [ 2724.443061] ? sock_write_iter+0x3d0/0x3d0 [ 2724.443966] ? do_recvmmsg+0x6d0/0x6d0 [ 2724.444802] ? perf_trace_lock+0xac/0x490 [ 2724.445703] ? __lockdep_reset_lock+0x180/0x180 [ 2724.446724] ? perf_trace_lock+0xac/0x490 [ 2724.447626] ___sys_sendmsg+0xf3/0x170 [ 2724.448470] ? sendmsg_copy_msghdr+0x160/0x160 [ 2724.449459] ? lock_downgrade+0x6d0/0x6d0 [ 2724.450378] ? lock_downgrade+0x6d0/0x6d0 [ 2724.451308] ? __fget_files+0x296/0x4c0 [ 2724.452199] ? __fget_light+0xea/0x290 [ 2724.453051] __sys_sendmmsg+0x195/0x470 [ 2724.453939] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2724.454890] ? lock_downgrade+0x6d0/0x6d0 [ 2724.455820] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2724.456873] ? wait_for_completion_io+0x270/0x270 [ 2724.457938] ? rcu_read_lock_any_held+0x75/0xa0 [ 2724.458944] ? vfs_write+0x354/0xa70 [ 2724.459753] ? fput_many+0x2f/0x1a0 [ 2724.460554] ? ksys_write+0x1a9/0x260 [ 2724.461372] ? __ia32_sys_read+0xb0/0xb0 [ 2724.462274] __x64_sys_sendmmsg+0x99/0x100 [ 2724.463182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.464291] do_syscall_64+0x33/0x40 [ 2724.465099] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2724.466221] RIP: 0033:0x7f70f6d55b19 [ 2724.467025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.470990] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2724.472650] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2724.474206] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2724.475751] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2724.477281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.478844] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:26:18 executing program 1: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x128) syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x8) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 14:26:18 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 50) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:26:18 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:26:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x6c000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:26:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0xc10, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000000)={[{@min_batch_time}]}) 14:26:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000340)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x20000000001e0}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000b44b0ea15042f17f830d57ba076c965f8fa2547c201003ac3036809c26a2542af59e478bf795af5e0309dddbbf96bd3d5880e3c69ea9e007ab1f1fe727bc6bd489bf0f4382a0d37dd83782292951a3003344785f5bcd0b5453c932be4e4156020f40"]) r1 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x10001, 0x7, &(0x7f00000006c0)=[{&(0x7f0000000240)="6ebe5e2c64e29aa8518228122db7af291abb065833ec474f71ab125c0cb347dbd8f8af602623247bb8741389d4b6cb186a99fc7bac2674604cb69710c81c7fdfbb8e27a83d8e960be59fdbbd2b79232267609f4ccd1ba38eef1ee1f604a29d847b0fa335c982559ff2cc1b36d03d9dc9b08ac80f14d91b9a2ce5046f564c56e8ba30733179f1a18123e188b3630771b593b6", 0x92, 0x80000000}, {&(0x7f0000000380)="0955912a475bd5c948e066a6816e8741c4240dc045ce32da016208bd2f62f33fed2a9d85cfb95bf9c79ba018fce38fc154da4b18df7e61affd695109e57cc220ab7e0a5bc8d02fed992520ed1ed35cfc19bc0f15b9bcb1ab846dbabe2248a338420f5cc9b13fe1df70fbd3bf9b9306ef8ffb5f6c7750f89f0a58674b8dc41287c1da0d4402faa867fff850c7888983eaa7fd0efc5df300afeecf2a29af1118b807372516226d33513570788bdaa3e0a3eccf50ab8ef0c943565b02272ab3b7703e75c2cce1216deb9db49b3adbfc73f3dba23beb531963", 0xd7, 0xfffffffffffff1fa}, {&(0x7f0000000480)="5c0b5344dfea602bf98991a020b3a58bc00725b4c358800916ec493563f92ccec3423cb181c1331e5b8ea108cc1719515be520095eb6b80249edb0dd01df07506cbf8d61b22233dd6d81f83a168afa8d958a2f9863b6cf11e34ad1fddef96b3fcdf3d1d23c3deadacc4b7b830bd1d25b0626e844d48edcdf644e547db9e3aca536a3bd0e1d601d77ddedb00053b8b72907f90a74ea17302c4e328cf039ba7e2ecb7678982d8cb106791a86f37e94eef349d76ecab69b8a2b58843520dc8fa34bbecfc6", 0xc3, 0x7}, {&(0x7f0000000580)="7b9bdccc1193f7836860afcf5112b7c7b3a64b9c6d42cce2194d4ff5a738f5aa78addcc99ef524ece79c27c61e8afceaab870fcfff8fe917c44cc9c41e25d0b0e5ddb46275218e7475ec405a9686a059d54838307bc10b9fc3", 0x59, 0x3}, {&(0x7f00000000c0)="d1e9102124a6f2e5a99d50cd8e4ec2ea7ebfeac21bbcefdf6030ad947f3b58e8df7d", 0x22, 0x400}, {&(0x7f00000001c0)="c2360df807aedd3e86e146e47e445f0b942fc0b3656db286925d72b18387887ec4b5c9a37aad3d5b1426", 0x2a, 0xffffffffffff7fff}, {&(0x7f0000000600)="e5bcdbbf7e07b9667c71f0e91ec325350d4fa44041e254afd6b2666db2b2d0444b161bb18e95c946aaf4da472af6020f5e9648142913f84f11a89eb84fc1ab197758911df64cb261788c78d53857c59929a11fd41fdb6e5ca9c24a4020cb24d2535aba96da98ccae443312ec594e0f84836e8b349da3ab3a26e6900427bf6f5185742f71b6cd", 0x86, 0xfac}], 0x2100c41, &(0x7f0000000780)=ANY=[@ANYBLOB="5c2c76666174002c2c6472652c66736d6167c7f23d3078303030303030303030303030303030342c66756e633d46494c455f434845434b2c7375626a5f757365723d76666174002c00"/82]) readlinkat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000800)=""/237, 0xed) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0) 14:26:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x0, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2739.979714] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2739.979979] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:26:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xa0) syz_mount_image$vfat(0x0, 0x0, 0x9, 0x0, 0x0, 0x8c, &(0x7f0000000340)=ANY=[@ANYBLOB='euid<', @ANYRESDEC=0xee01, @ANYBLOB="ac736d61636b6673666c6f6f723d002c66736d616769633d3078303030303030303030303030303030322c6d6561737572652c7365636c6162656c2c00"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(r0, &(0x7f0000000200)='./file1\x00', 0x280000, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/sr0', 0x200000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x140) sendfile(r0, r2, 0x0, 0x100000001) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x8, 0x1) [ 2740.024470] FAULT_INJECTION: forcing a failure. [ 2740.024470] name failslab, interval 1, probability 0, space 0, times 0 [ 2740.025870] CPU: 1 PID: 27365 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2740.026600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2740.027432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27376 comm=syz-executor.4 [ 2740.027472] Call Trace: [ 2740.027496] dump_stack+0x107/0x167 [ 2740.030886] should_fail.cold+0x5/0xa [ 2740.031297] ? __alloc_skb+0x6d/0x5b0 [ 2740.031704] should_failslab+0x5/0x20 [ 2740.032108] kmem_cache_alloc_node+0x55/0x330 [ 2740.032585] __alloc_skb+0x6d/0x5b0 [ 2740.032981] __ip_append_data+0x2930/0x3310 [ 2740.033454] ? raw_destroy+0x30/0x30 [ 2740.033865] ? ip_finish_output+0x330/0x330 [ 2740.034330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2740.034866] ? ipv4_mtu+0x1ed/0x2c0 [ 2740.035256] ? raw_destroy+0x30/0x30 [ 2740.035651] ip_append_data+0x114/0x1a0 [ 2740.036087] raw_sendmsg+0xaa6/0x29d0 [ 2740.036508] ? dst_output+0x170/0x170 [ 2740.036913] ? __lock_acquire+0x1657/0x5b00 [ 2740.037390] ? perf_trace_lock+0xac/0x490 [ 2740.037829] ? SOFTIRQ_verbose+0x10/0x10 [ 2740.038284] ? create_object.isra.0+0x3ad/0xa20 [ 2740.038784] ? __lockdep_reset_lock+0x180/0x180 [ 2740.039288] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2740.039842] ? find_held_lock+0x2c/0x110 [ 2740.040288] ? trace_hardirqs_on+0x5b/0x180 [ 2740.040749] ? dst_output+0x170/0x170 [ 2740.041163] inet_sendmsg+0x11d/0x140 [ 2740.041569] ? inet_send_prepare+0x540/0x540 [ 2740.042046] __sock_sendmsg+0x13c/0x190 [ 2740.042469] ____sys_sendmsg+0x334/0x870 [ 2740.042899] ? sock_write_iter+0x3d0/0x3d0 [ 2740.043347] ? do_recvmmsg+0x6d0/0x6d0 [ 2740.043762] ? perf_trace_lock+0xac/0x490 [ 2740.044201] ? __lockdep_reset_lock+0x180/0x180 [ 2740.044689] ? perf_trace_lock+0xac/0x490 [ 2740.045130] ___sys_sendmsg+0xf3/0x170 [ 2740.045545] ? sendmsg_copy_msghdr+0x160/0x160 [ 2740.046040] ? lock_downgrade+0x6d0/0x6d0 [ 2740.046482] ? lock_downgrade+0x6d0/0x6d0 [ 2740.046927] ? __fget_files+0x296/0x4c0 [ 2740.047356] ? __fget_light+0xea/0x290 [ 2740.047772] __sys_sendmmsg+0x195/0x470 [ 2740.048208] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2740.048663] ? lock_downgrade+0x6d0/0x6d0 [ 2740.049126] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2740.049636] ? wait_for_completion_io+0x270/0x270 [ 2740.050171] ? rcu_read_lock_any_held+0x75/0xa0 [ 2740.050665] ? vfs_write+0x354/0xa70 [ 2740.051069] ? fput_many+0x2f/0x1a0 [ 2740.051453] ? ksys_write+0x1a9/0x260 [ 2740.051858] ? __ia32_sys_read+0xb0/0xb0 [ 2740.052298] __x64_sys_sendmmsg+0x99/0x100 [ 2740.052744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2740.053287] do_syscall_64+0x33/0x40 [ 2740.053690] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2740.054249] RIP: 0033:0x7f70f6d55b19 [ 2740.054648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2740.056589] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2740.057397] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2740.058161] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2740.058918] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2740.059680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2740.060429] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:26:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)={r2, r3+10000000}) 14:26:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x74000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:26:19 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{r14, 0x5, 0xabb8, 0x3, 0x9, 0x0, 0x8, 0x7, 0x9, 0x9, 0xfff, 0x7, 0x3, 0x3, 0x80000000}, 0x10, [0x0, 0x0]}) r15 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r15, 0x112, 0xb, &(0x7f0000000500)=0x3, 0x2) connect$bt_sco(r15, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 14:26:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x0, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:26:19 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 51) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2740.238274] EXT4-fs (sda): re-mounted. Opts: min_batch_time=0x0000000000000000,,errors=continue [ 2740.282083] EXT4-fs (sda): re-mounted. Opts: min_batch_time=0x0000000000000000,,errors=continue [ 2740.319973] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:26:19 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x3, 0x0, 0x81, 0xee, 0x0, 0x8, 0x8c010, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x8}, 0x8008, 0x1b858, 0x6, 0x3, 0xe1, 0x32, 0x6, 0x0, 0x200, 0x0, 0xd9}, 0x0, 0x6, r0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="60010000100001000000000000000000ff020000000000000000000000000001fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/463], 0x160}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r4], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0x6, 0x6, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9286, 0x0, 0xc39, 0xa6219d3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) 14:26:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x7a000000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:26:19 executing program 1: syz_emit_ethernet(0x26, &(0x7f00000000c0)=ANY=[@ANYBLOB="aae6c3aaaabbffffffffffff43051c760ef5daa2ceecd2217caf9267dbd58b090000000000005051e1305cbf824f505413d0a24f391237f9a3991736fd2cf0dc00fe4b3185a4ead4f7563bc8e1febad9095b5cb26365400e3e866ea479bebb636e6b70c0b50d3da612e45cba911cf7f67cd95632c23d01918d6eedae08a7c75a4db98f288fe8dbecd648cccbe8e4c129a03bd80eea"], 0x0) [ 2740.417843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27492 comm=syz-executor.4 14:26:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x0, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2740.478373] FAULT_INJECTION: forcing a failure. [ 2740.478373] name failslab, interval 1, probability 0, space 0, times 0 [ 2740.481092] CPU: 0 PID: 27493 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2740.482781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2740.484708] Call Trace: [ 2740.485333] dump_stack+0x107/0x167 [ 2740.486213] should_fail.cold+0x5/0xa [ 2740.487110] ? create_object.isra.0+0x3a/0xa20 [ 2740.488188] should_failslab+0x5/0x20 [ 2740.489081] kmem_cache_alloc+0x5b/0x310 [ 2740.490064] create_object.isra.0+0x3a/0xa20 [ 2740.491096] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2740.492297] kmem_cache_alloc_node+0x169/0x330 [ 2740.493377] __alloc_skb+0x6d/0x5b0 [ 2740.494259] __ip_append_data+0x2930/0x3310 [ 2740.495301] ? raw_destroy+0x30/0x30 [ 2740.496203] ? ip_finish_output+0x330/0x330 [ 2740.497228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2740.498449] ? ipv4_mtu+0x1ed/0x2c0 [ 2740.499316] ? raw_destroy+0x30/0x30 [ 2740.500194] ip_append_data+0x114/0x1a0 [ 2740.501150] raw_sendmsg+0xaa6/0x29d0 [ 2740.502081] ? dst_output+0x170/0x170 [ 2740.502986] ? __lock_acquire+0x1657/0x5b00 [ 2740.504038] ? perf_trace_lock+0xac/0x490 [ 2740.505026] ? SOFTIRQ_verbose+0x10/0x10 [ 2740.506010] ? create_object.isra.0+0x3ad/0xa20 [ 2740.507132] ? __lockdep_reset_lock+0x180/0x180 [ 2740.508264] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2740.509494] ? find_held_lock+0x2c/0x110 [ 2740.510502] ? trace_hardirqs_on+0x5b/0x180 [ 2740.511538] ? dst_output+0x170/0x170 [ 2740.512452] inet_sendmsg+0x11d/0x140 [ 2740.513365] ? inet_send_prepare+0x540/0x540 [ 2740.514436] __sock_sendmsg+0x13c/0x190 [ 2740.515402] ____sys_sendmsg+0x334/0x870 [ 2740.516388] ? sock_write_iter+0x3d0/0x3d0 [ 2740.517405] ? do_recvmmsg+0x6d0/0x6d0 [ 2740.518367] ? perf_trace_lock+0xac/0x490 [ 2740.519382] ? __lockdep_reset_lock+0x180/0x180 [ 2740.520501] ? perf_trace_lock+0xac/0x490 [ 2740.521512] ___sys_sendmsg+0xf3/0x170 [ 2740.522511] ? sendmsg_copy_msghdr+0x160/0x160 [ 2740.523643] ? lock_downgrade+0x6d0/0x6d0 [ 2740.524671] ? lock_downgrade+0x6d0/0x6d0 [ 2740.525695] ? __fget_files+0x296/0x4c0 [ 2740.526696] ? __fget_light+0xea/0x290 [ 2740.527670] __sys_sendmmsg+0x195/0x470 [ 2740.528654] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2740.529726] ? lock_downgrade+0x6d0/0x6d0 [ 2740.530781] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2740.531974] ? wait_for_completion_io+0x270/0x270 [ 2740.533168] ? rcu_read_lock_any_held+0x75/0xa0 [ 2740.534318] ? vfs_write+0x354/0xa70 [ 2740.535255] ? fput_many+0x2f/0x1a0 [ 2740.536169] ? ksys_write+0x1a9/0x260 [ 2740.537120] ? __ia32_sys_read+0xb0/0xb0 [ 2740.538166] __x64_sys_sendmmsg+0x99/0x100 [ 2740.539218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2740.540501] do_syscall_64+0x33/0x40 [ 2740.541441] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2740.542743] RIP: 0033:0x7f70f6d55b19 [ 2740.543684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2740.547855] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2740.549473] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2740.551014] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2740.552553] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2740.554122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2740.555684] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:26:19 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:26:19 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 52) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2740.719458] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:26:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x86020000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2740.879970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27504 comm=syz-executor.4 14:26:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0x0, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2740.979594] FAULT_INJECTION: forcing a failure. [ 2740.979594] name failslab, interval 1, probability 0, space 0, times 0 [ 2740.981996] CPU: 0 PID: 27511 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2740.983445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2740.985180] Call Trace: [ 2740.985782] dump_stack+0x107/0x167 [ 2740.986579] should_fail.cold+0x5/0xa [ 2740.987382] ? create_object.isra.0+0x3a/0xa20 [ 2740.988343] should_failslab+0x5/0x20 [ 2740.989148] kmem_cache_alloc+0x5b/0x310 [ 2740.990035] create_object.isra.0+0x3a/0xa20 [ 2740.990964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2740.992035] kmem_cache_alloc_node+0x169/0x330 [ 2740.993003] __alloc_skb+0x6d/0x5b0 [ 2740.993776] __ip_append_data+0x2930/0x3310 [ 2740.994712] ? raw_destroy+0x30/0x30 [ 2740.995508] ? ip_finish_output+0x330/0x330 [ 2740.996424] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2740.997472] ? ipv4_mtu+0x1ed/0x2c0 [ 2740.998250] ? raw_destroy+0x30/0x30 [ 2740.999024] ip_append_data+0x114/0x1a0 [ 2740.999865] raw_sendmsg+0xaa6/0x29d0 [ 2741.000675] ? dst_output+0x170/0x170 [ 2741.001467] ? __lock_acquire+0x1657/0x5b00 [ 2741.002402] ? perf_trace_lock+0xac/0x490 [ 2741.003262] ? SOFTIRQ_verbose+0x10/0x10 [ 2741.004105] ? create_object.isra.0+0x3ad/0xa20 [ 2741.005095] ? __lockdep_reset_lock+0x180/0x180 [ 2741.006090] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2741.007159] ? find_held_lock+0x2c/0x110 [ 2741.008025] ? trace_hardirqs_on+0x5b/0x180 [ 2741.008930] ? dst_output+0x170/0x170 [ 2741.009726] inet_sendmsg+0x11d/0x140 [ 2741.010541] ? inet_send_prepare+0x540/0x540 [ 2741.011449] __sock_sendmsg+0x13c/0x190 [ 2741.012283] ____sys_sendmsg+0x334/0x870 [ 2741.013134] ? sock_write_iter+0x3d0/0x3d0 [ 2741.014018] ? do_recvmmsg+0x6d0/0x6d0 [ 2741.014825] ? perf_trace_lock+0xac/0x490 [ 2741.015724] ? __lockdep_reset_lock+0x180/0x180 [ 2741.016677] ? perf_trace_lock+0xac/0x490 [ 2741.017538] ___sys_sendmsg+0xf3/0x170 [ 2741.018358] ? sendmsg_copy_msghdr+0x160/0x160 [ 2741.019302] ? lock_downgrade+0x6d0/0x6d0 [ 2741.020181] ? lock_downgrade+0x6d0/0x6d0 [ 2741.021042] ? __fget_files+0x296/0x4c0 [ 2741.021895] ? __fget_light+0xea/0x290 14:26:19 executing program 1: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000006c0)='dns_resolver\x00', &(0x7f0000000700)=@keyring={'key_or_keyring:', r1}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0effffffff131415161718191a1b1c1d1e1f2021222324252627289a1248072d2e2f303132333435363738393a3b3c3d3e3f40c70a21e6036d5181d440bbd822428b6094f743e5f7ef1703ca8f59e9806e0796978d434c77f07d0f9d5fa5114ee76c037cb806a1dc1df3bf7ba8dbdb28df7fe9e979a63457546628f80b907a6e0e72dee74858ad3dc44fde8f4220e80c7f3dfd07c4aafcd8b27e96e9f86847f76e06887e819c4b77ce68e7f37783b547c7935d1dee2294729bcb876da32e36d9d19490222b0826012dcac0ea5b0676fc359e6847b9eef77a6c550f6589905e0c9c3a05d8474128fb09c09fe4e884f0a019521cdb452676f7ebd4041e3c54cc5e81aa448d2926f19d605b6a0c70ff806c33ae446805051acd108d90b1829c715502f95f8622edd9facfa85dceb1dc12"], 0x48, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r4) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r5) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r6) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1) r7 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc3}, &(0x7f0000000580)={0x0, "0376f87abe9d0d200fbdef72daaa947cb71f1d543c70d9f1825fb88e7dbf1ef45e3baf45130ade784e733574e76e888e8319f2097e43b3864db873207c63f986", 0x27}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f00000004c0)='.request_key_auth\x00', r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='id_resolver\x00', 0x0) add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0x31, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2741.022732] __sys_sendmmsg+0x195/0x470 [ 2741.023719] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2741.024581] ? lock_downgrade+0x6d0/0x6d0 [ 2741.025432] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2741.026402] ? wait_for_completion_io+0x270/0x270 [ 2741.027375] ? rcu_read_lock_any_held+0x75/0xa0 [ 2741.028297] ? vfs_write+0x354/0xa70 [ 2741.029043] ? fput_many+0x2f/0x1a0 [ 2741.029765] ? ksys_write+0x1a9/0x260 [ 2741.030533] ? __ia32_sys_read+0xb0/0xb0 [ 2741.031369] __x64_sys_sendmmsg+0x99/0x100 [ 2741.032209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.033223] do_syscall_64+0x33/0x40 [ 2741.033970] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2741.034967] RIP: 0033:0x7f70f6d55b19 [ 2741.035701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.039298] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2741.040804] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2741.042207] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2741.043419] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2741.043594] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.043605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2741.043615] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:26:19 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x9effffff, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2741.263607] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:26:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)={r2, r3+10000000}) 14:26:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x1d, 0x25, 0x0, 0x20000000, {0x7}}, 0x14}}, 0x0) 14:26:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0x0, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:26:35 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 53) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:26:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xf0ffffff, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:26:35 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:26:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af3", 0x2a, 0x1c00}], 0x0, &(0x7f0000013800)=ANY=[]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f00000017c0)=0xe8) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x2, 0x40200) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001b00)={'sit0\x00', &(0x7f0000001a80)={'ip6_vti0\x00', r0, 0x29, 0x4, 0x5, 0x8000, 0x50, @dev={0xfe, 0x80, '\x00', 0x33}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7800, 0x700, 0x10001, 0x2}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001c80)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000001b40)=0xe8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r7], 0x38}}], 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r10], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001bc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001d80)={0xcc, 0x0, 0xa20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x14000080}, 0xc040800) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r1, &(0x7f0000001380)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x8e, 0x8, &(0x7f0000001600)=[{&(0x7f0000001900)="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", 0x139, 0x9}, {&(0x7f0000000340)="62284490d8dd0d0f21ebdd01319d68a033a13464e1480d5362890c14ea3062416f8d3cfe8297849ec2d99f9d4cb7300451839974a865b01f17a1a6f604606c0a3f07f0d158b3f5dd691b05a4af0de26def50f6d65c45c79ef532fb12006592166d360a16359b3efbd8194cd9d2ed0f16208a25231a7cc6349e506a367bc679be43c7a373df8a3373c698eaf4cc12a5d3c2fa2b511457251974746de920d1d3723ef51030f0311464f11ec2", 0xab, 0x4}, {&(0x7f0000000400)="0cdfed5167e7662a2e3e6579787de2e529a8e30c22ba23520ab0e8f1b753a9fc6945df5a19c1fc910f86d4c526436986106f4488575838269ec04fcdcffc648fd9b9c092661e7a4c1c6eeeb812e18e0e7037556977cff5ab32e971da0c7ad7", 0x5f, 0x8}, {&(0x7f0000000480)="c90fe3576e86ad19c699f4b2e49b2f02770517ff2d5bc43445bc4f396c169e852c28632ffb58546a0a29cbdb9da36f70befc892be6a47abe261b4d17474f9ec9e1875859700d8f8db27c7a1cc7faa6230802a3fb", 0x54, 0x2}, {&(0x7f0000000140)="0f3102accb8c8a9be84b27080150dbe4e35d6c5e6982230c74c03ac9721ecaea904cd95adcd19437a7197c919c5774d73e2641efb61aa13e2ed37bd8", 0x3c, 0x3}, {&(0x7f0000000500)="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", 0x1000, 0xffffffffffff551c}, {&(0x7f0000001500)="1a0bb09bd4376614f3b3a9030c50a15dbd5b24f1c467490ebe5fba579d577ca571de0b60f96e69f00e413e38d1b5f1", 0x2f, 0x20}, {&(0x7f0000001540)="852047b846cb076f91967af1a2e092bb9bd2ba51927a96e85cdb3fce650cb4ec377e0119905a4a2c38e592a244ef6946c33e3e4cff4c319b2bbc6ffbd67340f6c7bc564bba922c30a162ed065b025ee98684ee313fe76a030e206441049ceab5a8efb56a6f7f400e4d2fb31babba148ce945df9a84258a153eb00346031443f38cd3ef1bb5f9d9d1e0f6023a31ef039633d57760d82ee0523f4371f3cbf2bf899435081d6c624b7ceea0314cf117b5421d58a3", 0xb3, 0x2}], 0x312a011, &(0x7f0000001800)={[{@nouser_xattr}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@sysvgroups}, {@journal_dev={'journal_dev', 0x3d, 0x4}}], [{@dont_measure}, {@hash}, {@pcr={'pcr', 0x3d, 0x2a}}, {@euid_gt={'euid>', r1}}, {@fowner_gt={'fowner>', 0xee01}}, {@dont_hash}]}) umount2(&(0x7f0000000040)='./file0\x00', 0xa) 14:26:35 executing program 2: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @remote, @val={@val={0x9100, 0x4, 0x0, 0x2}, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5, 0x0, 0xfffd}}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r0, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x3}, @val={0x3, 0x3, 0x3, 0x6, 0x2}, @ipv4=@igmp={{0x10, 0x4, 0x1, 0x1, 0xcb, 0x65, 0x0, 0x2, 0x2, 0x0, @multicast1, @private=0xa010100, {[@end, @lsrr={0x83, 0x7, 0x58, [@remote]}, @cipso={0x86, 0x10, 0x3, [{0x2, 0xa, "11a146f9fbea4567"}]}, @ssrr={0x89, 0x13, 0x17, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x24}]}]}}, {0x17, 0x2, 0x0, @empty, "bf41fcf33d5b47e4f4fcf0e39a4a5adba19f43a1e0d816515d087c56edf7e52d98e2df90340ff64611e28ebfa2bf691a428fa3a6e498f75471dbd288fd9a757352078daa27e504d06d7b47ec46c8aab80d36af0e2168801b552888fdd12cd1886f3b37bd58613d73ad3ce94231dbe41db0cb0c0c8b73ae59859ade050afb499e3e1c14"}}}, 0xd9) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @llc={@llc={0xf4, 0xf8, '*', "42ffbfcbde3852348e045a76cd6ebfd8a47d26a1c09a76af922d8708c39fd0651ad1960611d7c80741d0e5f20f71ba1d82b91976c7921f6bd3f79927abf0cb5de58c954b2ae3f6e17d3095b74c086ae051f08c380e0ccb1747a25d9190bf47c9447da30e33677f8f33517f71c2a1e7c0031b6393fd3b2c"}}}, 0x7a) [ 2756.843331] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2756.855074] FAULT_INJECTION: forcing a failure. [ 2756.855074] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.856797] CPU: 0 PID: 27536 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2756.857808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2756.859079] Call Trace: [ 2756.859535] dump_stack+0x107/0x167 [ 2756.860170] should_fail.cold+0x5/0xa [ 2756.860837] should_failslab+0x5/0x20 [ 2756.861492] __kmalloc_node_track_caller+0x74/0x3b0 [ 2756.862362] ? __ip_append_data+0x2930/0x3310 [ 2756.863148] __alloc_skb+0xb1/0x5b0 [ 2756.863784] __ip_append_data+0x2930/0x3310 [ 2756.864551] ? raw_destroy+0x30/0x30 [ 2756.865203] ? ip_finish_output+0x330/0x330 [ 2756.865930] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2756.866793] ? ipv4_mtu+0x1ed/0x2c0 [ 2756.867416] ? raw_destroy+0x30/0x30 [ 2756.868052] ip_append_data+0x114/0x1a0 [ 2756.868735] raw_sendmsg+0xaa6/0x29d0 [ 2756.869399] ? dst_output+0x170/0x170 [ 2756.870041] ? __lock_acquire+0x1657/0x5b00 [ 2756.870813] ? perf_trace_lock+0xac/0x490 [ 2756.871459] ? SOFTIRQ_verbose+0x10/0x10 [ 2756.872068] ? create_object.isra.0+0x3ad/0xa20 [ 2756.872771] ? __lockdep_reset_lock+0x180/0x180 [ 2756.873481] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2756.874263] ? find_held_lock+0x2c/0x110 [ 2756.874891] ? trace_hardirqs_on+0x5b/0x180 [ 2756.875535] ? dst_output+0x170/0x170 [ 2756.876109] inet_sendmsg+0x11d/0x140 [ 2756.876679] ? inet_send_prepare+0x540/0x540 [ 2756.877335] __sock_sendmsg+0x13c/0x190 [ 2756.877941] ____sys_sendmsg+0x334/0x870 [ 2756.878577] ? sock_write_iter+0x3d0/0x3d0 [ 2756.879204] ? do_recvmmsg+0x6d0/0x6d0 [ 2756.879784] ? perf_trace_lock+0xac/0x490 [ 2756.880404] ? __lockdep_reset_lock+0x180/0x180 [ 2756.881101] ? perf_trace_lock+0xac/0x490 [ 2756.881726] ___sys_sendmsg+0xf3/0x170 [ 2756.882329] ? sendmsg_copy_msghdr+0x160/0x160 [ 2756.883026] ? lock_downgrade+0x6d0/0x6d0 [ 2756.883717] ? lock_downgrade+0x6d0/0x6d0 [ 2756.884340] ? __fget_files+0x296/0x4c0 [ 2756.884939] ? __fget_light+0xea/0x290 [ 2756.885525] __sys_sendmmsg+0x195/0x470 [ 2756.886133] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2756.886772] ? lock_downgrade+0x6d0/0x6d0 [ 2756.887419] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2756.888145] ? wait_for_completion_io+0x270/0x270 [ 2756.888861] ? rcu_read_lock_any_held+0x75/0xa0 [ 2756.889551] ? vfs_write+0x354/0xa70 [ 2756.890113] ? fput_many+0x2f/0x1a0 [ 2756.890675] ? ksys_write+0x1a9/0x260 [ 2756.891241] ? __ia32_sys_read+0xb0/0xb0 [ 2756.891849] __x64_sys_sendmmsg+0x99/0x100 [ 2756.892476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2756.893242] do_syscall_64+0x33/0x40 [ 2756.893792] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2756.894564] RIP: 0033:0x7f70f6d55b19 [ 2756.895112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2756.897851] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2756.899032] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2756.900127] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2756.901219] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2756.902315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2756.903374] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:26:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xf20b0000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:26:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0x0, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:26:35 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r1, 0x0, 0x70) fcntl$setown(r1, 0x8, r2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x7, 0xe, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000100), 0x5}, 0x40, 0x4, 0x5, 0x6, 0xe000000000000000, 0x20, 0x6, 0x0, 0x3d8f, 0x0, 0x1}, r2, 0xb, r0, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) r4 = mq_open(&(0x7f0000000000)='.+]\x00', 0x40, 0xa6, &(0x7f0000000080)={0x81, 0x80, 0x7f, 0x2}) sendfile(r3, r4, &(0x7f00000000c0)=0xfff, 0x8) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r5, 0x0) ftruncate(r5, 0x0) 14:26:35 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 54) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:26:35 executing program 1: msgctl$IPC_RMID(0x0, 0x0) r0 = msgget(0x3, 0x202) msgrcv(r0, &(0x7f0000000000)={0x0, ""/30}, 0x26, 0x0, 0x3000) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x3, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/30}, 0x26, 0x0, 0x3000) msgsnd(r1, &(0x7f0000000100)={0x3}, 0x8, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) [ 2757.142055] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:26:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:26:36 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xfcffffff, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2757.217355] FAULT_INJECTION: forcing a failure. [ 2757.217355] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.219670] CPU: 1 PID: 27662 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2757.221131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.222932] Call Trace: [ 2757.223470] dump_stack+0x107/0x167 [ 2757.224308] should_fail.cold+0x5/0xa [ 2757.225081] ? __alloc_skb+0x6d/0x5b0 [ 2757.225861] should_failslab+0x5/0x20 [ 2757.226651] kmem_cache_alloc_node+0x55/0x330 [ 2757.227561] __alloc_skb+0x6d/0x5b0 [ 2757.228305] __ip_append_data+0x2930/0x3310 [ 2757.229277] ? raw_destroy+0x30/0x30 [ 2757.230122] ? ip_finish_output+0x330/0x330 [ 2757.231065] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.232091] ? ipv4_mtu+0x1ed/0x2c0 [ 2757.232906] ? raw_destroy+0x30/0x30 [ 2757.233663] ip_append_data+0x114/0x1a0 [ 2757.234487] raw_sendmsg+0xaa6/0x29d0 [ 2757.235274] ? dst_output+0x170/0x170 [ 2757.236091] ? __lock_acquire+0x1657/0x5b00 [ 2757.237017] ? perf_trace_lock+0xac/0x490 [ 2757.237926] ? SOFTIRQ_verbose+0x10/0x10 [ 2757.238759] ? create_object.isra.0+0x3ad/0xa20 [ 2757.239706] ? __lockdep_reset_lock+0x180/0x180 [ 2757.240716] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2757.241752] ? find_held_lock+0x2c/0x110 [ 2757.242595] ? trace_hardirqs_on+0x5b/0x180 [ 2757.243510] ? dst_output+0x170/0x170 [ 2757.244400] inet_sendmsg+0x11d/0x140 [ 2757.245242] ? inet_send_prepare+0x540/0x540 [ 2757.246146] __sock_sendmsg+0x13c/0x190 [ 2757.246973] ____sys_sendmsg+0x334/0x870 [ 2757.247859] ? sock_write_iter+0x3d0/0x3d0 [ 2757.248706] ? do_recvmmsg+0x6d0/0x6d0 [ 2757.249490] ? perf_trace_lock+0xac/0x490 [ 2757.250403] ? __lockdep_reset_lock+0x180/0x180 [ 2757.251387] ? perf_trace_lock+0xac/0x490 [ 2757.252315] ___sys_sendmsg+0xf3/0x170 [ 2757.253103] ? sendmsg_copy_msghdr+0x160/0x160 [ 2757.254029] ? lock_downgrade+0x6d0/0x6d0 [ 2757.254892] ? lock_downgrade+0x6d0/0x6d0 [ 2757.255733] ? __fget_files+0x296/0x4c0 [ 2757.256549] ? __fget_light+0xea/0x290 [ 2757.257367] __sys_sendmmsg+0x195/0x470 [ 2757.258226] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2757.259190] ? lock_downgrade+0x6d0/0x6d0 [ 2757.260051] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2757.261027] ? wait_for_completion_io+0x270/0x270 [ 2757.262004] ? rcu_read_lock_any_held+0x75/0xa0 [ 2757.263042] ? vfs_write+0x354/0xa70 [ 2757.263798] ? fput_many+0x2f/0x1a0 [ 2757.264624] ? ksys_write+0x1a9/0x260 [ 2757.265479] ? __ia32_sys_read+0xb0/0xb0 [ 2757.266348] __x64_sys_sendmmsg+0x99/0x100 [ 2757.267203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2757.268277] do_syscall_64+0x33/0x40 [ 2757.269058] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2757.270213] RIP: 0033:0x7f70f6d55b19 [ 2757.270965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.274839] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2757.276441] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2757.277878] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2757.279323] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.280762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2757.282222] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2757.400109] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:26:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:26:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)={r2, r3+10000000}) 14:26:51 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:26:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r1, 0x0, 0x70) fcntl$setown(r1, 0x8, r2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x7, 0xe, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000100), 0x5}, 0x40, 0x4, 0x5, 0x6, 0xe000000000000000, 0x20, 0x6, 0x0, 0x3d8f, 0x0, 0x1}, r2, 0xb, r0, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) r4 = mq_open(&(0x7f0000000000)='.+]\x00', 0x40, 0xa6, &(0x7f0000000080)={0x81, 0x80, 0x7f, 0x2}) sendfile(r3, r4, &(0x7f00000000c0)=0xfff, 0x8) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r5, 0x0) ftruncate(r5, 0x0) 14:26:51 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 55) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:26:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xffffe000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:26:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000140}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x60}}, 0x4000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f5fa4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x0, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001640)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r3, &(0x7f00000017c0)=0x80, &(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0, 0x0, 0x1}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', 0x0], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) 14:26:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:26:51 executing program 1: msgctl$IPC_RMID(0x0, 0x0) r0 = msgget(0x3, 0x202) msgrcv(r0, &(0x7f0000000000)={0x0, ""/30}, 0x26, 0x0, 0x3000) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x3, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/30}, 0x26, 0x0, 0x3000) msgsnd(r1, &(0x7f0000000100)={0x3}, 0x8, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) [ 2772.802203] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:26:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xfffff000, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2772.822355] FAULT_INJECTION: forcing a failure. [ 2772.822355] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.824908] CPU: 0 PID: 27684 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2772.826430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.828251] Call Trace: [ 2772.828834] dump_stack+0x107/0x167 [ 2772.829644] should_fail.cold+0x5/0xa [ 2772.830503] ? create_object.isra.0+0x3a/0xa20 [ 2772.831508] should_failslab+0x5/0x20 [ 2772.832343] kmem_cache_alloc+0x5b/0x310 [ 2772.833239] create_object.isra.0+0x3a/0xa20 [ 2772.834200] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2772.835320] kmem_cache_alloc_node+0x169/0x330 [ 2772.836321] __alloc_skb+0x6d/0x5b0 [ 2772.837122] __ip_append_data+0x2930/0x3310 [ 2772.838076] ? raw_destroy+0x30/0x30 [ 2772.838909] ? ip_finish_output+0x330/0x330 [ 2772.839849] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2772.840950] ? ipv4_mtu+0x1ed/0x2c0 [ 2772.841751] ? raw_destroy+0x30/0x30 [ 2772.842586] ip_append_data+0x114/0x1a0 14:26:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x20, 0xa39, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 2772.843463] raw_sendmsg+0xaa6/0x29d0 [ 2772.844390] ? dst_output+0x170/0x170 [ 2772.845222] ? __lock_acquire+0x1657/0x5b00 [ 2772.846232] ? perf_trace_lock+0xac/0x490 [ 2772.847142] ? SOFTIRQ_verbose+0x10/0x10 [ 2772.848025] ? create_object.isra.0+0x3ad/0xa20 [ 2772.849044] ? __lockdep_reset_lock+0x180/0x180 [ 2772.850070] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2772.851208] ? find_held_lock+0x2c/0x110 [ 2772.852151] ? dst_output+0x170/0x170 [ 2772.853047] inet_sendmsg+0x11d/0x140 [ 2772.853912] ? inet_send_prepare+0x540/0x540 [ 2772.854881] __sock_sendmsg+0x13c/0x190 [ 2772.855793] ____sys_sendmsg+0x334/0x870 [ 2772.856681] ? sock_write_iter+0x3d0/0x3d0 [ 2772.857603] ? do_recvmmsg+0x6d0/0x6d0 [ 2772.858455] ? perf_trace_lock+0xac/0x490 [ 2772.859365] ? __lockdep_reset_lock+0x180/0x180 [ 2772.860379] ? perf_trace_lock+0xac/0x490 [ 2772.861288] ___sys_sendmsg+0xf3/0x170 [ 2772.862140] ? sendmsg_copy_msghdr+0x160/0x160 [ 2772.863160] ? lock_downgrade+0x6d0/0x6d0 [ 2772.864072] ? lock_downgrade+0x6d0/0x6d0 [ 2772.864981] ? __fget_files+0x296/0x4c0 [ 2772.865860] ? __fget_light+0xea/0x290 [ 2772.866754] __sys_sendmmsg+0x195/0x470 [ 2772.867637] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2772.868621] ? lock_downgrade+0x6d0/0x6d0 [ 2772.869559] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2772.870688] ? wait_for_completion_io+0x270/0x270 [ 2772.871748] ? rcu_read_lock_any_held+0x75/0xa0 [ 2772.872803] ? vfs_write+0x354/0xa70 [ 2772.873625] ? fput_many+0x2f/0x1a0 [ 2772.874452] ? ksys_write+0x1a9/0x260 [ 2772.875285] ? __ia32_sys_read+0xb0/0xb0 [ 2772.876214] __x64_sys_sendmmsg+0x99/0x100 [ 2772.877138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2772.878334] do_syscall_64+0x33/0x40 [ 2772.879149] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2772.880288] RIP: 0033:0x7f70f6d55b19 [ 2772.881108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2772.885288] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2772.886969] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2772.888543] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2772.890105] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.891686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2772.893237] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:26:51 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000a0000000c00060000000000001b000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmmsg(r8, &(0x7f0000001780)=[{{&(0x7f0000000040)=@caif=@dbg, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x0, 0x80000000, @mcast1}, 0x80, 0x0}}], 0x2, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYRES64, @ANYRESDEC=r0, @ANYBLOB="4d09c407b88b4002491bb3e7f2edef9ae5e16592ddeaebdb84bbf8dd34ea9cc94768f9f856e20313d266b645cf792485fae987a5be0a9d32dbd366f687f767606ca490f8745ad852b2303aa12199814b066c747e909ef11694d1980d53cf5d796ee0e75558585563a3ad51a97ea37615960985f717789c39baa1d89757bcb908a52451f3184117743590aee9ff21c0ba447594512b9c27095445ce7c0062b4bd0f0354bdb63132b08be88b8c51742d6bd8a934fc4d7f616bb9b8fdcdeac0ba1eb8de6579ca3351abf242a0845f6170e6261c3deb5d5ad93bc72ca9a51ac8efb3a75028ed3c12", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES64, @ANYRESDEC=r5, @ANYRESDEC=r8, @ANYBLOB="b030f0cd89960c49f48b3175d4d104450bc13724cc61dbcb81a7d54a4ff22c9c9508b8e36b275c2f3094843fd3a5f3cd20e16f9639566b20923f79beaa32436fc7138829486d0a74c57c332ede6d1745b324ba83b960793dd7c0cd3c6c8696c7d87934c5d9592e577b05bd4392c92f511c1ddc83d289570632a7b2fb3b10be0fad30b377c9980b6600"], 0x44}}, 0x24040004) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x18400, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8880, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 14:26:51 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/186, 0xba}, {0x0}, {&(0x7f0000000200)=""/2, 0x2}, {0x0}], 0x5, 0x4, 0x0) [ 2773.077008] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:26:51 executing program 1: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1cd, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(r0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x3, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) renameat2(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)=ANY=[@ANYBLOB="62958be60100000018000000", @ANYRES32, @ANYBLOB="3f000000070000002e2f66696c653000b15f5d0bb6490403f2da35218c419888d1d5940eeecd757fe3130ffddf971f12801d0f491a155f9ea075f39a0c1ff3e1e22429eadbe46f7388f8020e99fcb3e1d6945b34151fc5b3a5c9597481ee59b522ab0b60c092bb840519fc8184c10151d1cc67ac6d94734a672ff97e117aa6d8bf79c51e75"]) msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df7a544996e279220b14c205f60dfffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000ffffffef0000000000000000080000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000140c1929000000000000"], 0xed, 0x3, 0x3800) r2 = msgget$private(0x0, 0x0) msgget$private(0x0, 0x9) msgrcv(r2, 0x0, 0x0, 0x0, 0x2800) msgctl$IPC_RMID(r2, 0x0) r3 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgrcv(r3, &(0x7f0000000480)={0x0, ""/188}, 0xc4, 0x2, 0x2000) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 14:26:52 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 56) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:26:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x20, 0xa39, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 14:26:52 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xffffff7f, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2773.325364] FAULT_INJECTION: forcing a failure. [ 2773.325364] name failslab, interval 1, probability 0, space 0, times 0 [ 2773.328087] CPU: 0 PID: 27813 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2773.329615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2773.331511] Call Trace: [ 2773.332109] dump_stack+0x107/0x167 [ 2773.332993] should_fail.cold+0x5/0xa [ 2773.333927] should_failslab+0x5/0x20 [ 2773.334807] __kmalloc_node_track_caller+0x74/0x3b0 [ 2773.335945] ? __ip_append_data+0x2930/0x3310 [ 2773.336962] __alloc_skb+0xb1/0x5b0 [ 2773.337795] __ip_append_data+0x2930/0x3310 [ 2773.338789] ? raw_destroy+0x30/0x30 [ 2773.339648] ? ip_finish_output+0x330/0x330 [ 2773.340620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2773.341727] ? ipv4_mtu+0x1ed/0x2c0 [ 2773.342589] ? raw_destroy+0x30/0x30 [ 2773.343422] ip_append_data+0x114/0x1a0 [ 2773.344341] raw_sendmsg+0xaa6/0x29d0 [ 2773.345204] ? dst_output+0x170/0x170 [ 2773.346078] ? __lock_acquire+0x1657/0x5b00 [ 2773.347049] ? perf_trace_lock+0xac/0x490 [ 2773.347999] ? SOFTIRQ_verbose+0x10/0x10 [ 2773.348897] ? create_object.isra.0+0x3ad/0xa20 [ 2773.349957] ? __lockdep_reset_lock+0x180/0x180 [ 2773.350999] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2773.352129] ? find_held_lock+0x2c/0x110 [ 2773.353076] ? trace_hardirqs_on+0x5b/0x180 [ 2773.354032] ? dst_output+0x170/0x170 [ 2773.354915] inet_sendmsg+0x11d/0x140 [ 2773.355755] ? inet_send_prepare+0x540/0x540 [ 2773.356741] __sock_sendmsg+0x13c/0x190 [ 2773.357618] ____sys_sendmsg+0x334/0x870 [ 2773.358557] ? sock_write_iter+0x3d0/0x3d0 [ 2773.359483] ? do_recvmmsg+0x6d0/0x6d0 [ 2773.360357] ? perf_trace_lock+0xac/0x490 [ 2773.361282] ? __lockdep_reset_lock+0x180/0x180 [ 2773.362338] ? perf_trace_lock+0xac/0x490 [ 2773.363260] ___sys_sendmsg+0xf3/0x170 [ 2773.364164] ? sendmsg_copy_msghdr+0x160/0x160 [ 2773.365180] ? lock_downgrade+0x6d0/0x6d0 [ 2773.366102] ? lock_downgrade+0x6d0/0x6d0 [ 2773.367055] ? __fget_files+0x296/0x4c0 [ 2773.367934] ? __fget_light+0xea/0x290 [ 2773.368822] __sys_sendmmsg+0x195/0x470 [ 2773.369702] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2773.370675] ? lock_downgrade+0x6d0/0x6d0 [ 2773.371615] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2773.372717] ? wait_for_completion_io+0x270/0x270 [ 2773.373772] ? rcu_read_lock_any_held+0x75/0xa0 [ 2773.374835] ? vfs_write+0x354/0xa70 [ 2773.375659] ? fput_many+0x2f/0x1a0 [ 2773.376494] ? ksys_write+0x1a9/0x260 [ 2773.377330] ? __ia32_sys_read+0xb0/0xb0 [ 2773.378251] __x64_sys_sendmmsg+0x99/0x100 [ 2773.379190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2773.380356] do_syscall_64+0x33/0x40 [ 2773.381175] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2773.382333] RIP: 0033:0x7f70f6d55b19 [ 2773.383153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2773.387365] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2773.389034] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2773.390658] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2773.392228] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2773.393795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2773.395371] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2773.493327] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:27:08 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="a0d19c03000000d74473138b634700993009d8e117bec1200a809b9a8e0ed5c53a0000000000000000", @ANYRES32]) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x3341, &(0x7f0000000080)={0x0, 0xd4b8, 0x1, 0x3, 0x118, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x2000}}, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pidfd_getfd(r4, r5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 14:27:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x38, r4, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x17, 0x34, @random="379cc9a5d19cd3963ab62529bceb4b4d56c6e6"}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8814}, 0x840) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}}, 0x0) 14:27:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 57) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:27:08 executing program 3: r0 = syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r2) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x4, 0x0, 0x0, 0x5e}}}, 0xa) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x30) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffff, 0x200000) getdents64(r3, &(0x7f0000000500)=""/192, 0xc0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0x400, 0x2, 0x4, 0x0, 0xffff}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) getgroups(0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r5], 0x6) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) 14:27:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x20, 0xa39, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 14:27:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xffffff9e, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:27:08 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:27:08 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)={r2, r3+10000000}) [ 2789.690314] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2789.706650] perf: interrupt took too long (5245 > 4966), lowering kernel.perf_event_max_sample_rate to 38000 [ 2789.718754] FAULT_INJECTION: forcing a failure. [ 2789.718754] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.721306] CPU: 0 PID: 27934 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2789.722875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.724644] Call Trace: [ 2789.725215] dump_stack+0x107/0x167 [ 2789.726002] should_fail.cold+0x5/0xa [ 2789.726840] should_failslab+0x5/0x20 [ 2789.727657] __kmalloc_node_track_caller+0x74/0x3b0 [ 2789.728721] ? __ip_append_data+0x2930/0x3310 [ 2789.729689] __alloc_skb+0xb1/0x5b0 [ 2789.730476] __ip_append_data+0x2930/0x3310 [ 2789.731433] ? raw_destroy+0x30/0x30 [ 2789.732247] ? ip_finish_output+0x330/0x330 [ 2789.733168] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.734262] ? ipv4_mtu+0x1ed/0x2c0 [ 2789.735073] ? raw_destroy+0x30/0x30 [ 2789.735871] ip_append_data+0x114/0x1a0 [ 2789.736735] raw_sendmsg+0xaa6/0x29d0 [ 2789.737570] ? dst_output+0x170/0x170 [ 2789.738385] ? __lock_acquire+0x1657/0x5b00 [ 2789.739340] ? perf_trace_lock+0xac/0x490 [ 2789.740227] ? SOFTIRQ_verbose+0x10/0x10 [ 2789.741096] ? create_object.isra.0+0x3ad/0xa20 [ 2789.742095] ? __lockdep_reset_lock+0x180/0x180 [ 2789.743150] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2789.744254] ? find_held_lock+0x2c/0x110 [ 2789.745161] ? trace_hardirqs_on+0x5b/0x180 [ 2789.746093] ? dst_output+0x170/0x170 [ 2789.746934] inet_sendmsg+0x11d/0x140 [ 2789.747754] ? inet_send_prepare+0x540/0x540 [ 2789.748696] __sock_sendmsg+0x13c/0x190 [ 2789.749549] ____sys_sendmsg+0x334/0x870 [ 2789.750423] ? sock_write_iter+0x3d0/0x3d0 [ 2789.751334] ? do_recvmmsg+0x6d0/0x6d0 [ 2789.752170] ? perf_trace_lock+0xac/0x490 [ 2789.753069] ? __lockdep_reset_lock+0x180/0x180 [ 2789.754064] ? perf_trace_lock+0xac/0x490 [ 2789.754992] ___sys_sendmsg+0xf3/0x170 [ 2789.755832] ? sendmsg_copy_msghdr+0x160/0x160 [ 2789.756819] ? lock_downgrade+0x6d0/0x6d0 [ 2789.757729] ? lock_downgrade+0x6d0/0x6d0 [ 2789.758637] ? __fget_files+0x296/0x4c0 [ 2789.759503] ? __fget_light+0xea/0x290 [ 2789.760351] __sys_sendmmsg+0x195/0x470 [ 2789.761212] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2789.762136] ? lock_downgrade+0x6d0/0x6d0 [ 2789.763075] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2789.764111] ? wait_for_completion_io+0x270/0x270 [ 2789.765144] ? rcu_read_lock_any_held+0x75/0xa0 [ 2789.766158] ? vfs_write+0x354/0xa70 [ 2789.766965] ? fput_many+0x2f/0x1a0 [ 2789.767757] ? ksys_write+0x1a9/0x260 [ 2789.768572] ? __ia32_sys_read+0xb0/0xb0 [ 2789.769462] __x64_sys_sendmmsg+0x99/0x100 [ 2789.770366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.771503] do_syscall_64+0x33/0x40 [ 2789.772307] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2789.773422] RIP: 0033:0x7f70f6d55b19 [ 2789.774227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.778191] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2789.779853] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2789.781395] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2789.782956] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2789.784496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.786038] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:27:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xfffffff0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:27:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x18, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) [ 2789.920152] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:27:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0xf3, 0x3f, 0x0, 0x0, 0x24200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc02c, 0x7, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x40}, 0x0, 0x27, 0xffffffffffffffff, 0x1) futex(&(0x7f00000000c0)=0x2, 0xb, 0x2, &(0x7f0000000100), &(0x7f0000000140), 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x8) 14:27:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)) 14:27:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:27:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) close_range(r0, r0, 0x2) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x17) inotify_add_watch(r3, 0x0, 0x4000040) inotify_rm_watch(r3, r4) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYBLOB="014377d7f33f96ac5b2d4600e2ff0f00010000e9ff00", @ANYRES32, @ANYBLOB="4f9ce80776ac95fd2e2f66696c653800"]) r5 = dup3(0xffffffffffffffff, r3, 0x0) inotify_add_watch(r5, &(0x7f0000000140)='./file0\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd=r0, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r2}}, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 14:27:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="007da1804886b1655e09966a7e07c44fecf87834ecdbb6650240e9635802006dcb1b3d4462fe59be4c704b17c759b22d78c09367f849dcb8494ee15dcf7d0932dbaed64f8c680c37873c7d65eecdf0eaed8aa6cb52ef5ae7ab35864fec9cb6832dcf658d3b207a59e9d55e0757fcf48c97ef843f7e"]) r1 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x8, 0x8000, 0x101, 0x4]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r0) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x7, 0x3, &(0x7f0000000440)=[{&(0x7f00000002c0)="d5b317c504ad84ba661fd4fd8b5c1ec7571fbd1b3853e35d22e890f2e945ab6295abe5", 0x23, 0x2}, {&(0x7f0000000300)="dc07cd98f58bc95b35f5339b819c5d69cdcea38f73d37fe5d3da7733709a015d8099cf158d79025abbbca4a80dfd1a593e38fc81b5dfe3af9c22939964da882cea367229e2cebd54ac1fe59e8e66734619d146a21d10fb43478921d99ec59d0f920610dbadd057a3729febabac457208f41a0723dc7b33e92d7ce335792032829bc370c330e29f64f5559db61598249aa98d1ddd", 0x94, 0x8001}, {&(0x7f00000003c0)="160624a780f348d13d93fb33a1fe0f2dc38e55daca744f98af5a7369b4f84efaad60d556a7c8d0b0d378b04122baaa219235bcd7a95434a1aa26c3a54241e4a3b6a51c54ba992d813ff1b145899ff4066e6b1167bb82a1f8d362459bf6d8a28ca65cc0ec494c1d05744cfb99329986edabe81c61e3925b19e43bde7f", 0x7c, 0x9}], 0x40010, &(0x7f00000004c0)={[{@nobh}, {@data_err_abort}], [{@fowner_gt={'fowner>', 0xee01}}, {@subj_type={'subj_type', 0x3d, '/dev/snapshot\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x815}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_appraise}]}) openat(r4, &(0x7f0000000580)='./file0\x00', 0x2800, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unshare(0x48020200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x8, @auto="afaadf0231faa5e6"}) 14:27:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xfffffffc, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:27:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x18, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 14:27:26 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 58) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2807.831197] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:27:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r0, 0x9e46, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x3, 0x1, 0x3, 0xec1, 0x1b, "c0cde08b2427f896001600cce99a783bfe095a"}) dup(r0) syz_io_uring_setup(0x1ec4, &(0x7f0000000200)={0x0, 0x65af, 0x20, 0x3, 0x56, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) [ 2807.848373] FAULT_INJECTION: forcing a failure. [ 2807.848373] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.850951] CPU: 1 PID: 28074 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2807.852388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.854096] Call Trace: [ 2807.854649] dump_stack+0x107/0x167 [ 2807.855413] should_fail.cold+0x5/0xa [ 2807.856207] ? __alloc_skb+0x6d/0x5b0 [ 2807.856998] should_failslab+0x5/0x20 [ 2807.857778] kmem_cache_alloc_node+0x55/0x330 [ 2807.858696] __alloc_skb+0x6d/0x5b0 [ 2807.859476] __ip_append_data+0x2930/0x3310 [ 2807.860410] ? raw_destroy+0x30/0x30 [ 2807.861203] ? ip_finish_output+0x330/0x330 [ 2807.862091] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2807.863132] ? ipv4_mtu+0x1ed/0x2c0 [ 2807.863884] ? raw_destroy+0x30/0x30 [ 2807.864655] ip_append_data+0x114/0x1a0 [ 2807.865484] raw_sendmsg+0xaa6/0x29d0 [ 2807.866278] ? dst_output+0x170/0x170 [ 2807.867063] ? __lock_acquire+0x1657/0x5b00 [ 2807.867980] ? perf_trace_lock+0xac/0x490 [ 2807.868826] ? SOFTIRQ_verbose+0x10/0x10 [ 2807.869653] ? create_object.isra.0+0x3ad/0xa20 [ 2807.870623] ? __lockdep_reset_lock+0x180/0x180 [ 2807.871612] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2807.872670] ? find_held_lock+0x2c/0x110 [ 2807.873518] ? trace_hardirqs_on+0x5b/0x180 [ 2807.874404] ? dst_output+0x170/0x170 [ 2807.875203] inet_sendmsg+0x11d/0x140 [ 2807.875992] ? inet_send_prepare+0x540/0x540 [ 2807.876898] __sock_sendmsg+0x13c/0x190 [ 2807.877717] ____sys_sendmsg+0x334/0x870 [ 2807.878559] ? sock_write_iter+0x3d0/0x3d0 [ 2807.879424] ? do_recvmmsg+0x6d0/0x6d0 [ 2807.880234] ? perf_trace_lock+0xac/0x490 [ 2807.881093] ? __lockdep_reset_lock+0x180/0x180 [ 2807.882044] ? perf_trace_lock+0xac/0x490 [ 2807.882924] ___sys_sendmsg+0xf3/0x170 [ 2807.883738] ? sendmsg_copy_msghdr+0x160/0x160 [ 2807.884680] ? lock_downgrade+0x6d0/0x6d0 [ 2807.885539] ? lock_downgrade+0x6d0/0x6d0 [ 2807.886389] ? __fget_files+0x296/0x4c0 [ 2807.887239] ? __fget_light+0xea/0x290 [ 2807.888075] __sys_sendmmsg+0x195/0x470 [ 2807.888901] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2807.889792] ? lock_downgrade+0x6d0/0x6d0 [ 2807.890660] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2807.891667] ? wait_for_completion_io+0x270/0x270 [ 2807.892671] ? rcu_read_lock_any_held+0x75/0xa0 [ 2807.893617] ? vfs_write+0x354/0xa70 [ 2807.894391] ? fput_many+0x2f/0x1a0 [ 2807.895158] ? ksys_write+0x1a9/0x260 [ 2807.895937] ? __ia32_sys_read+0xb0/0xb0 [ 2807.896793] __x64_sys_sendmmsg+0x99/0x100 [ 2807.897664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.898727] do_syscall_64+0x33/0x40 [ 2807.899495] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2807.900573] RIP: 0033:0x7f70f6d55b19 [ 2807.901332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.905135] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2807.906683] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2807.908149] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2807.909619] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.911114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.912580] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:27:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0xffffffff, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2808.090673] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:27:43 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local={0xfe, 0x0}, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:27:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x18, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 14:27:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)) 14:27:43 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0xc59f771273dd298a, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001300)=""/174) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 14:27:43 executing program 1: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file2\x00', 0x1ad) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r1, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0xffff, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) unlink(&(0x7f0000000040)='./file2\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f0000000340)={0x0, 0x3, 0x2, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r4}}, 0x40) r5 = creat(&(0x7f0000000180)='./file2\x00', 0x44) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd=r5, 0xffff, &(0x7f0000000240)=[{&(0x7f00000001c0)="50b3ef4c818ad8160dcabb1b9b165c0b7990eb4dc617f6a1464e843257c48950d7a435b706b0", 0x26}], 0x1, 0x4, 0x1, {0x3f}}, 0x0) 14:27:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:27:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x21021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x80) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6, 0x20, 0x3f, 0x5, 0x0, 0x8, 0x2040, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x8201, 0x2, 0xfffffffa, 0x8, 0x400, 0x4, 0x5, 0x0, 0x10001, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x2, 0x8, 0x40, 0x0, 0x1, 0x20003, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x744, 0x2, @perf_config_ext={0x6, 0x8001}, 0x4408, 0x4, 0xd7, 0xd, 0x4, 0x1, 0x0, 0x0, 0x1870, 0x0, 0x3ff}, 0x0, 0x0, r2, 0x1) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x0) 14:27:43 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 59) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2824.270117] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2824.283280] FAULT_INJECTION: forcing a failure. [ 2824.283280] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.284920] CPU: 1 PID: 28203 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2824.285912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.287097] Call Trace: [ 2824.287476] dump_stack+0x107/0x167 [ 2824.287995] should_fail.cold+0x5/0xa [ 2824.288540] ? create_object.isra.0+0x3a/0xa20 [ 2824.289187] should_failslab+0x5/0x20 [ 2824.289719] kmem_cache_alloc+0x5b/0x310 [ 2824.290303] create_object.isra.0+0x3a/0xa20 [ 2824.290931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.291683] kmem_cache_alloc_node+0x169/0x330 [ 2824.292346] __alloc_skb+0x6d/0x5b0 [ 2824.292867] __ip_append_data+0x2930/0x3310 [ 2824.293491] ? raw_destroy+0x30/0x30 [ 2824.294021] ? ip_finish_output+0x330/0x330 [ 2824.294628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.295348] ? ipv4_mtu+0x1ed/0x2c0 [ 2824.295853] ? raw_destroy+0x30/0x30 [ 2824.296377] ip_append_data+0x114/0x1a0 [ 2824.296945] raw_sendmsg+0xaa6/0x29d0 [ 2824.297492] ? dst_output+0x170/0x170 [ 2824.298018] ? __lock_acquire+0x1657/0x5b00 [ 2824.298639] ? perf_trace_lock+0xac/0x490 [ 2824.299227] ? SOFTIRQ_verbose+0x10/0x10 [ 2824.299801] ? create_object.isra.0+0x3ad/0xa20 [ 2824.300456] ? __lockdep_reset_lock+0x180/0x180 [ 2824.301119] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2824.301828] ? find_held_lock+0x2c/0x110 [ 2824.302410] ? trace_hardirqs_on+0x5b/0x180 [ 2824.303038] ? dst_output+0x170/0x170 [ 2824.303572] inet_sendmsg+0x11d/0x140 [ 2824.304102] ? inet_send_prepare+0x540/0x540 [ 2824.304721] __sock_sendmsg+0x13c/0x190 [ 2824.305283] ____sys_sendmsg+0x334/0x870 [ 2824.305846] ? sock_write_iter+0x3d0/0x3d0 [ 2824.306436] ? do_recvmmsg+0x6d0/0x6d0 [ 2824.306981] ? perf_trace_lock+0xac/0x490 [ 2824.307579] ? __lockdep_reset_lock+0x180/0x180 [ 2824.308231] ? perf_trace_lock+0xac/0x490 [ 2824.308816] ___sys_sendmsg+0xf3/0x170 [ 2824.309358] ? sendmsg_copy_msghdr+0x160/0x160 [ 2824.309997] ? lock_downgrade+0x6d0/0x6d0 [ 2824.310585] ? lock_downgrade+0x6d0/0x6d0 [ 2824.311180] ? __fget_files+0x296/0x4c0 [ 2824.311746] ? __fget_light+0xea/0x290 [ 2824.312292] __sys_sendmmsg+0x195/0x470 [ 2824.312841] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2824.313438] ? lock_downgrade+0x6d0/0x6d0 [ 2824.314054] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2824.314803] ? wait_for_completion_io+0x270/0x270 [ 2824.315480] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.316119] ? vfs_write+0x354/0xa70 [ 2824.316640] ? fput_many+0x2f/0x1a0 [ 2824.317150] ? ksys_write+0x1a9/0x260 [ 2824.317682] ? __ia32_sys_read+0xb0/0xb0 [ 2824.318249] __x64_sys_sendmmsg+0x99/0x100 [ 2824.318833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.319563] do_syscall_64+0x33/0x40 [ 2824.320082] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2824.320785] RIP: 0033:0x7f70f6d55b19 [ 2824.321307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.323848] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2824.324908] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2824.325898] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2824.326885] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.327894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.328871] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:27:43 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:27:43 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) 14:27:43 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'team_slave_1\x00'}) flock(0xffffffffffffffff, 0x2) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1cf}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup3(r0, r0, 0x80000) bind$packet(r1, &(0x7f0000000580)={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="9ba495311632"}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r2, &(0x7f0000000280)={0x800, 0x110, 0x14}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r3}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x407, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="5add1125ad544f7f834f3e34b4e60c99cb408f7072fa45a26a2e26b345f13c814dc8d053eac5b5db76adbf9c7ce36342b32e86dc59e83fd65bc31913aa90676c61a5eb8ee7688e73b04a83b6660f604fd0439f16cd32a1de1049f7015ce64ede5f39b1bb0da0b74f6fb1a10c62293b75349fac247aa775449fa65cfb757d8a800e0fa5b7f37242786141c35953835b368a16643534f09e758f7c8b0c646c7c2a08ed5ba4f6745264039d83", 0xab}, {&(0x7f0000000480)="67e61955f24f964ab8e308b7ee611b05506ac478c22e279410994b45c33a7fe9cad185243af889c724b65afc5f33656d846d2b321a1d63431b7a8454d7936a24281ad64a1e23e7fccc31ca3db6afe90d", 0x50}, {&(0x7f0000000500)="98d41f65527706f8c94f320a95f7790dcffacbe5a49d3972c7629db2d4dba67605517e943d14d74631c6487e244d5168fb007dd34db19660de71abaad0069acea0f118f0f733a75898d4802b7ee730adbd3a991f7cca357a4b52c5ab", 0x5c}, {&(0x7f0000000740)="1f5cd0d8a61c87d2caeaae68cac59fbbdbdbfdbda520a7ecdec4b45b62969d9284f937fdc84e0c1f93e5c1b5a20eb5c31f0eb05f626c733fc44aa288003dc8d07e2f164b71d54125566f45ea156a8a42347edf6fd090128807ef0e473558a2b772599d775e265e9a34de3810f88db617af22bb08b92e46ee423dd8661e48f53497b658240b53b69cb7ee486f687c6b3fa347b3721576e491e71f8bf9166eab687469ebf2fbd411869ccb65e0f23eaf429b2b0a6ec0c6a53dfe089e92974f854f", 0xc0}, {&(0x7f0000000800)="b26ebe7beb647e520798cd969dae26ded2bac432ca90cdc27fe20c2229531c1380903792e51ec365b0d03dd33cd05dc6b86d166d19ca753aec13b629410ebfe3e8ed6efb4d85b98007abb89d5401aecd43d3ebbff100f19df35a0646ec84ac2ee8835bfc1e999e61313fc5d850c10ad690e6082568e3acf86c460a7a17690a9d98c8f0df238948010998608c98141e45e37d12b4516e4e71a1d16349e97ce639ec1088df82", 0xa5}, {&(0x7f0000000bc0)="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", 0xfb}, {&(0x7f0000000140)="1db73b66701f24c47aa4df0cb874be46ef045d060e0352d08f1c47652cf2ffe303457cbb43462ed3d7b43c1ced3c6cf3d28e9668b24afdaf62475d", 0x3b}, {&(0x7f0000000cc0)="1fb55e2d10176627dbf20b6fbd3bfaf0e2d73cb3ff82eb35c71f5bdd17a89b4eecf9769a240e9d5b58967765146149c0a22e5a2961677097b8c0cce1ad812f2f2cc331331a34e15bdf09833c59b7fa6626d6aa61779b50729a625e653bcf8ee4052888b6658d6d8f025bde133df2b0211c6e82ab3f930759b1dfb6baf98807770cec67efee0171240d3a3725e726b3b254d3e6471c283ad1accbfb05ba38c81a102062bb1a49d4823004b76b90dcf5337af33ba340da146f49e6b88c922b10e0ab13efe3b965ab74235ac228cad8bff6e570d9101142ac5ca3d0f362273a09d60e5da8204423df5fc45da61f034f8a94d5acdc6f8b86365ab039706f7c2dfb10c5b4f4db26f7f44b5f1cf445c46f17a73d6d2600fe73604fa3c12bf880461a7d2a8cd3ad246f51c28de69d72fdea13998f7dd22328a71d6182ac7026df1008f1efa7c48613dbe6f0e3b4ac5af65749754870bfdd10feda5588def52d24c092e395919fd5aaf5f01630001be0a2f088a9229055099ca935e24a5fb610160f51a1a4deb1a026a2b411cd6e81e4338dfedd60d19e1f640b3c33f4d67e783bbd646ad1bb3413eb264e33441e0bf68217a2263de693b17968b10456d581e37674fa5a17939b80254b0b4b80517182191dd37ff5936a22bf40c4becd758723a8b29bc419acaaf628b89a5b4428faf5985c2c66d418a7b3228983875077806da71dff08958dd9005ab9c25e2f54dd2c840e53567fa2c2a0e84618a0404412e145c95496e35b2461666f9285141e650a0438bbd9c41a9131b43373a3931c02e4d829dd137d93c34fdf6bee4b345a60ad42cd4c74e5c1365aefc526e4a045fb09bd4d26682aa79dcff57626b648944eb2681eb175bad2459e57962bb8358bde32883e3e74a2982b7a183a058e79c2c5ca7160cff3cfff07120797396cd29a4f2e6563bd2aa19105b85346671b3c7813d73036248a407b1dacaf3c99e995a38447c610fca74fc59cf93ee7f7b36035e8bfd5269616c89a3fdb142ca4bd2a370b6b0a2195e06b5d8258243065d2f8049b6f4a5b64ef9700f3c71e628a4727402db42e61773d8636d4c2fdf70bb38c07e311499c517afcd1301adb6e290b44e8e06f5895efff6a6f867c0693bb3bfb026cddb904bf3906bd6b35a413cb365608808d450e0fc9376c3ad554949238013a3c063463bdb2bf59024fd616c69e84a5cadcda3ede1229d99d5c51e4118600958ac078d4f564d550a79c4356c5ca77748ccef9839bdb018d80690ea959b99ed3fedb1c9bd8cef174bc5321359b873ae9e9a5da7a52bf9b93861aeeee881c207ef54686afd8069a606f15b72e9ceffa32a63798c219b91ce051c7a2a052c9e9b08326374eb91e37a4cf39a274ca42131645fece27c73af4793a667ec83e722bac1b3ff808fef5b10a7ce76360645aa9777dd62caec535abcc13dfee6d95cf653237b0ccd087b4231ae84d2aaffb62880eeb598544f7680d98515665e6b9aa5cb66afa8c2b14e592d49245bdcb5289b18326158f55c8d9e6b1b393ee3f6f105f50fd19ea7174e3e1de205d5fd81ce2b082a7e423346c524099595d089874f6f261d24eeb2e955eb4eb7a85a36a8551ca1376d089cd6bd8bffab20e0bd5dcdae8dd7f9106b45d60f692bf349d814dedd6a1b8d604faae5561b4c49cbf0f80d0e29b972b7227ef3781d1ee75e015d228611c88b293ac1802ad382f648bdee4e48449e50f554938d48b617ea85ece588755c8e20b6476c35cb7621ee773a8024304d9e0b75e9e1a973afc8c42fdb735100c7bda81a2b633a086b7c3cf2dca7ca1d2bc4fad0d503906b1c878c31b87562b72ea79fdc0c877d77abf13273522635c9771cdc1801c5ac0034d7366820aa3e4e16821741b210c8042142db676229d4b8e4df27070f44560d9d978d2f6788696518c052b7b61affb1ab5a11d546b8ba8ea9393f18174af682470b335cb31a3b9ded3d02ae4db2d00cd3a6780195ea5805437f030d4480672962a2f5621d70c32e2696ac49f167d94cc316813c930ba4e2713a7ed3ac2ad6eae64039ab286ae0476ac77716a513a18101e2e4059f29bd2bdecdc01878811ee5354d572ba51a85b591117de93f1253a620bcb8d52b888f75a53a4ffa73d44b4d173b6401d0f303d2ded7ebb32b05db62ac0177b3086d4558f01c161317abcce00f5cc7bfdc9ba77d379f3e770260a55e602901b636d5140dbf610b04c7ae7af7b49f9b69cff647672dd709be847574f393eb3f22ec07ccf90fca81a7d1a17be8bbffb9016da7c46c20b231f1f3629f12cedb8663f8c47ebc8883dd1fb0316d2150303cbcd50cd14b6d6ed193578ddbc0075c6191b85dc006f48cd5d56f8c0c0d45f80244b6ce757037b4c80859d21ec234abe1e9591e86b83df82543613fa5f73ec8ec7ebe5126ad0cff7ca22a715ed0708c10c32267ca06648fa639f00afef048aa4d1aade4466e534bc65cef261d0e80563e148962b9039d8a21e92f0511bcc2140680f9fa55f98132aa9f95692a669950f75509de012d8c419f1e322e8de881935f79002af367217b4550d497d6907305a5859e2ae3fc0b8884931a8fa95b665abefeabcf5a709be0275260fd69e129a316c5f9f42694f5395cf3a03df914bc680b0a963d1894a6b7e4ad0b0ba9e754e8f295b937b4f0211b83170583cdab9a5b0d4ee96b7bad54286fd9a73da9192292a39ed30ac658683976d359038e00974db4923bf6abd6891bde97f637903d40115f647e9b775a4f6ebbd74cafdfbc69c1cb5961b2739f8890bfeb6e50f1415140ae232778efdfe63c1793fd10f395dba3d8d3ed5df5a743772df3ecd007c296b0bbd30505f989dd66491aed465f7fb185c84b955c90ef9a39d42350f851e4c34340a98c9edcd723f00646ca6c4400b6d2fc1fbfea256be503684421d3bf8fcb6598fea2cd56c234e183cdd1f37d0bedca314a9013e0750d7961b3b57e25ca182f2fda772b450faadbeaab26bc4a811c8da4e7c8fdc6f56ce0fc88097b90a516241b1377eb9608b0bccafc58c7fba9341ca8cf2160a4ec8f6f929577aad22dd4ac1144140d692b1e6f3d278812355db8be0c63952a61f43f61f80b58cdf721ebc660a0a9f8efbba11ac3a03972104c2d0922cd0c42f7981c8160af39ebb2ae87f025c41de07f0c2355a0701cdb8241718dfd732ff8c44d3eb7cf7f21c8d10af24d459131ad54fa34294c9d7ff8dd5dca990572917a76313ea56e92fd0c18842b936f216a1c04dee7cf8d4562f6ef80adbfc20f0ab34be9c6a0a220b8194cb49cd7a61e8789f089eb9b4d684f10c3f83a087046e2e92baa1e0b4e62f3fef20d621beebabd59177e0f3f6290c8d72af7de2eb029c4cd14c632457b70145122e3d213e2bec5ca1b5346fbff2ea68764223875ad2b4e6b42c773f60daf943f686eaee99236fa155ca07513f2ad2521064888839abd037e7df51b35c1ae14f2035f00cf83f657cbbf672d8c55983941e2b399f6d106edb29d867385b7debbd35965351faeec04b13328b3af986632f7975cf9853f1f2f999dd334833f47adb5e4a4e4252cd07de6512c86a59b2872bfd97858b6ef7197ed73ee1602b142c500262d7f2a0d741e08d4c59ffa7cbb42dcb88245e6fcd0d3ddbb8d6f97aafb96543840d14bd2e987ea832215ee449f31bbaf186875ab937c8d2133f1198f2a3856e36ab8f5eb755cec63090057163bb9437eb3833a6774074e38b1b7d352b3892abbfe4b2ec83cb8a19448c6389c35ec5861e9b6ce33a298eb25f056af4020f256173f87d1744fe8953d87a907c3efa3113b5638d034325ada8a5a29e6c7b81b5aeb2e77a86e11e8487e18d0f5e0f85a6f731feca5b74ce42ec11c582a045f13d9f6f8d7b51a58f283cb4e434e8210a6b78c8d81ddeec04ca9adc2984635101115256bf90ad9531c88c4ac4261aab769e313ad62e098b1faefea808e7eb0f3f679d1c54ec957897a779924f8d9b2eab4d55c533691f709b705a0e146f0a9a697057b30727bbb0ac152e9ded30007b7c718a5b9dedebf02e24c27c1e9e55d665812c6a165be06ed30d177555d4db70f2315a4ae03be788cffc31da1be7efa1337d1d79a46e25bc1901c2d20714518c5aa78bb59ae1d3dc2f0048b6af97869544f291cfeb16cecbb2c9975119b94079f31b65e4147f8285729144f4b82f77ab7ee951ead72179ae18b724899899c77908f4642c94d27c232defd1ea06e5c75f5498d435533df647d16ff7208184748bad677fc2f7e84d058b4454b4f4450fe26400f163b772414d8e5995a22d69af35a31176dadff93b7ecc18a8ddfe2040fcfb96d32146ce6d6e07dba57180ce416ea35d92d7bbc2fd0454c180e0caab0a87ece0e4a8172d58dfbcafa3e6490ef66dcae2e5264c5a18adaa45f261e621257b57dbbcd89defbaf3cf93378ae77751dd016319b2f58552f9ecab4cf9d680e907c1f493323d801328685d498bd9c2b2a3cefe0541d8143c33faf5b998cb82c30bf19e2b98ca580f6b5bd8326a1593e079b1ffe4185645cf069385dcd763b1ace3fe625110747237d75339c1d5f92a923340b5d48a1d7d99ba23fc423f06cec4000bb3b449df815648ad47345e4e8fa82625dbb66fa1367820d684cffd8a768783b10eda77400e2c4b8fde1ccf447084091378b655f0bab566fb36fe38409ae431ea52c45d5566da590353f936ec5c30c5a2f3c8d2eca1433cb1f4ec6af3211333ac42cd20520d678c2c90756514b3cd14f264a9bdc6f51a5caa568ccd6bac5ff77f1c39a5b7faef49763690b68700cc9c1988159206a67bdaa1cd3c4072d28690449f7f6e9e8bfdeaa1653d9c8671af945516b9c69b5cf0ae99c36c5efae45d1c1325b20c6993c5e8482992a7c8ccfd407d7bf9c985b6483d901d5451096b6946fbdd69fb7337b4a213abfb32ac3e219e1459ad314c5bfa07d48513dcbde9cbc6b05d2f79f9423ab3bbe5ce4a53585b1fa896694e2ab25e8548f5fee3f5d425ed19b6aaa18570012be96ed5e8b6caef7a9f16f3eef7c2949eddd3d2d4febc1c02f265638d776a68ce1d1fbf97d10813ec264f7f5930d2890849d43e001bb4bb855e76281b10e2e915aca9146eef67adc19a2c05c4089f12f3d0814569aa23953115e3c7602f0743a8b540f9b9361be20209f5f7189ef378bc611f138ed7c7fdc832eda95c61741583b5463ebd0eb4412aedd7763a309b8f52ab2246084891f89c753abfd0f3f43cac5e3daab56cf15127fef94cff6781416f2e3b8a78c8ee47541c395497b840a917d1c8a83cc95a486aa9148f5e80c631a04e5fa4d1b39546e292a88beab15f8363641d10ed9f708c99c5b69e078d357635a8757d9acc17634cbed42f33a73a1eb95e7b601477d64ed6ecfdcf01e7557695b0c546399a62aeeeddf02767612f99e8d89ea9ccfe91ef5cb8c7ef800a10258ccb605fc66696091fa0da995edb861b364f7e338d8fc3dae16014e6c9518802bf997ba69ee476ea5ed075a445d334eba2d1ec508ada2f2ca8aacb39b81ae56e3fdfb4783a541a4dcd54cd534c7e794d7b0f5b5500eb088da0bbfbc096fea4b1c777a2b031df22e8ed6dbbf7c8489827bce321875bbb15a6ea001ef785c60e50e603ea0a1562cbe8d143389e03f957cab8a5bef21279958a61dd32cb5b3e341a4ae40e081b0e50eb8d0929822eea7eb0d2068cfc2b43632a9cf94c6f2747a20e1d27d07b0bd1fc8ca0bf77c3079b531dbe5e3a1d4667ca57e0c8b89db4e9ef78afd7b2cc697fe01d49b456f942", 0x1000}], 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="700000000000100029000000fe0000001f2eec6f25a634ad4ecc8e4820d62dc9ca292f1c9e6fdee4a5eb7ca91fd753a204f2fa234639e72ee7d5cb34ed2ac31e6e04a16f77ff29ca2512cd35d641556081ec83b2a12051ea3300d91840be5b5735625b00000ca7e01b00c000000000000000130100000000000054d167a0366ce2c534df5beebb42277565313e55c4ac58eed0e563a821b781b55fa0619e8ae500a2fec63f7e906ec10d7efdd907ebc78df112cdead7e9e8289d60b47cd7153e7b2829672ab580cb528c5d56f3392dbd992430711e63408b4c057a11992f885b2d6cb6c3add2384ac1e63d13902600d2e4bfade73fda4ea7a2afcac45d2b27f29cf7d3e5aa77b97fc5f8d2b9044d18aeb9a539d6dfa46650cf3a9a12b82900000004000000000000001301000098000000a7f10b21a0f7c36c9edaed237a66e6ed84e5335d247a32da50020000002311ab6661ceaf795fc3e58d673382e276136c123fd69a8d9ac30b0220253ac460010738a62d18ed601edfb795b6ff667564ab6cb88ce70000ebcc4398beeb1332784e6536d20b0472720c5ac900ef41bbbf8088478fcb96cadf77cae0634f05b3ebb1989879ab45f3109a68d384e865422e9d20a113fc41335f86305d938fb8cd8daa9bbcf00828a919891ec922248f81760492d672454ac2bab298260d82a02a1e1dcb81ec0c433b8c0dd989b009406a4a7b279933438c95ff51c6c409618f20bdb7ad5b63a3a87aff2df665975df753ecf1000000000000000000589000"/566], 0x190}, 0x0, 0x80, 0x1}, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x8, 0x9e28, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x20, 0x3, 0x5}}) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r4, r0, 0x0) [ 2824.504836] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:27:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 1) 14:27:43 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 60) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:27:43 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x2}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:27:43 executing program 1: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file2\x00', 0x1ad) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r1, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0xffff, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) unlink(&(0x7f0000000040)='./file2\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3560, &(0x7f0000000340)={0x0, 0x3, 0x2, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r4}}, 0x40) r5 = creat(&(0x7f0000000180)='./file2\x00', 0x44) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd=r5, 0xffff, &(0x7f0000000240)=[{&(0x7f00000001c0)="50b3ef4c818ad8160dcabb1b9b165c0b7990eb4dc617f6a1464e843257c48950d7a435b706b0", 0x26}], 0x1, 0x4, 0x1, {0x3f}}, 0x0) [ 2824.648443] device veth0_vlan entered promiscuous mode [ 2824.668087] FAULT_INJECTION: forcing a failure. [ 2824.668087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2824.670986] CPU: 0 PID: 28325 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2824.672527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.674350] Call Trace: [ 2824.674936] dump_stack+0x107/0x167 [ 2824.675752] should_fail.cold+0x5/0xa [ 2824.676602] _copy_from_user+0x2e/0x1b0 [ 2824.677479] __copy_msghdr_from_user+0x91/0x4b0 [ 2824.678501] ? __ia32_sys_shutdown+0x80/0x80 [ 2824.679478] ? perf_trace_lock+0xac/0x490 [ 2824.680390] ? __lock_acquire+0xbb1/0x5b00 [ 2824.681327] sendmsg_copy_msghdr+0xa1/0x160 [ 2824.682268] ? do_recvmmsg+0x6d0/0x6d0 [ 2824.683126] ? perf_trace_lock+0xac/0x490 [ 2824.684028] ? SOFTIRQ_verbose+0x10/0x10 [ 2824.684928] ? __lockdep_reset_lock+0x180/0x180 [ 2824.685937] ? perf_trace_lock+0xac/0x490 [ 2824.686841] ? SOFTIRQ_verbose+0x10/0x10 [ 2824.687755] ___sys_sendmsg+0xc6/0x170 [ 2824.687778] ? sendmsg_copy_msghdr+0x160/0x160 [ 2824.687801] ? __fget_files+0x26d/0x4c0 [ 2824.687820] ? lock_downgrade+0x6d0/0x6d0 [ 2824.687842] ? find_held_lock+0x2c/0x110 [ 2824.687871] ? __fget_files+0x296/0x4c0 [ 2824.687903] ? __fget_light+0xea/0x290 [ 2824.687932] __sys_sendmsg+0xe5/0x1b0 [ 2824.687951] ? __sys_sendmsg_sock+0x40/0x40 [ 2824.687969] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.687994] ? fput_many+0x2f/0x1a0 [ 2824.688014] ? ksys_write+0x1a9/0x260 [ 2824.688033] ? __ia32_sys_read+0xb0/0xb0 [ 2824.688058] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2824.688077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.688092] ? trace_hardirqs_on+0x5b/0x180 [ 2824.688117] do_syscall_64+0x33/0x40 [ 2824.688134] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2824.688147] RIP: 0033:0x7f0d4532db19 [ 2824.688167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.688178] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2824.688198] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2824.688209] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2824.688220] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.688231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2824.688242] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 14:27:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) [ 2824.806831] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:27:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 2) [ 2824.843264] FAULT_INJECTION: forcing a failure. [ 2824.843264] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.843287] CPU: 0 PID: 28430 Comm: syz-executor.0 Not tainted 5.10.207 #1 14:27:43 executing program 2: r0 = creat(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x3) dup2(r2, r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x101002, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x48020200) [ 2824.843298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.843304] Call Trace: [ 2824.843328] dump_stack+0x107/0x167 [ 2824.843353] should_fail.cold+0x5/0xa [ 2824.843382] should_failslab+0x5/0x20 [ 2824.843403] __kmalloc_node_track_caller+0x74/0x3b0 [ 2824.843421] ? __ip_append_data+0x2930/0x3310 [ 2824.843449] __alloc_skb+0xb1/0x5b0 [ 2824.843475] __ip_append_data+0x2930/0x3310 [ 2824.843519] ? raw_destroy+0x30/0x30 [ 2824.843552] ? ip_finish_output+0x330/0x330 [ 2824.843573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.843590] ? ipv4_mtu+0x1ed/0x2c0 [ 2824.843613] ? raw_destroy+0x30/0x30 [ 2824.843631] ip_append_data+0x114/0x1a0 [ 2824.843662] raw_sendmsg+0xaa6/0x29d0 [ 2824.843699] ? dst_output+0x170/0x170 [ 2824.843718] ? __lock_acquire+0x1657/0x5b00 [ 2824.843757] ? perf_trace_lock+0xac/0x490 [ 2824.843775] ? SOFTIRQ_verbose+0x10/0x10 [ 2824.843792] ? create_object.isra.0+0x3ad/0xa20 [ 2824.843814] ? __lockdep_reset_lock+0x180/0x180 [ 2824.843849] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2824.843865] ? find_held_lock+0x2c/0x110 [ 2824.843902] ? trace_hardirqs_on+0x5b/0x180 [ 2824.843926] ? dst_output+0x170/0x170 [ 2824.843947] inet_sendmsg+0x11d/0x140 [ 2824.843965] ? inet_send_prepare+0x540/0x540 [ 2824.843982] __sock_sendmsg+0x13c/0x190 [ 2824.844002] ____sys_sendmsg+0x334/0x870 [ 2824.844025] ? sock_write_iter+0x3d0/0x3d0 [ 2824.844041] ? do_recvmmsg+0x6d0/0x6d0 [ 2824.844060] ? perf_trace_lock+0xac/0x490 [ 2824.844086] ? __lockdep_reset_lock+0x180/0x180 [ 2824.844104] ? perf_trace_lock+0xac/0x490 [ 2824.844130] ___sys_sendmsg+0xf3/0x170 [ 2824.844154] ? sendmsg_copy_msghdr+0x160/0x160 [ 2824.844183] ? lock_downgrade+0x6d0/0x6d0 [ 2824.844212] ? lock_downgrade+0x6d0/0x6d0 [ 2824.844238] ? __fget_files+0x296/0x4c0 [ 2824.844271] ? __fget_light+0xea/0x290 [ 2824.844301] __sys_sendmmsg+0x195/0x470 [ 2824.844327] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2824.844346] ? lock_downgrade+0x6d0/0x6d0 [ 2824.844389] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2824.844414] ? wait_for_completion_io+0x270/0x270 [ 2824.844437] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.844453] ? vfs_write+0x354/0xa70 [ 2824.844476] ? fput_many+0x2f/0x1a0 [ 2824.844496] ? ksys_write+0x1a9/0x260 [ 2824.844516] ? __ia32_sys_read+0xb0/0xb0 [ 2824.844545] __x64_sys_sendmmsg+0x99/0x100 [ 2824.844563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.844584] do_syscall_64+0x33/0x40 [ 2824.844601] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2824.844613] RIP: 0033:0x7f70f6d55b19 [ 2824.844632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.844642] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2824.844664] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2824.844675] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2824.844686] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.844697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.844708] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2825.014261] FAULT_INJECTION: forcing a failure. [ 2825.014261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2825.014286] CPU: 1 PID: 28443 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2825.014295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2825.014298] Call Trace: [ 2825.014314] dump_stack+0x107/0x167 [ 2825.014328] should_fail.cold+0x5/0xa [ 2825.014349] _copy_from_user+0x2e/0x1b0 [ 2825.014361] iovec_from_user+0x141/0x400 [ 2825.014375] __import_iovec+0x67/0x590 [ 2825.014386] ? __ia32_sys_shutdown+0x80/0x80 [ 2825.014397] ? perf_trace_lock+0xac/0x490 [ 2825.014412] import_iovec+0x83/0xb0 [ 2825.014426] sendmsg_copy_msghdr+0x131/0x160 [ 2825.014437] ? do_recvmmsg+0x6d0/0x6d0 [ 2825.014446] ? perf_trace_lock+0xac/0x490 [ 2825.014460] ? __lockdep_reset_lock+0x180/0x180 [ 2825.014469] ? perf_trace_lock+0xac/0x490 [ 2825.014478] ? SOFTIRQ_verbose+0x10/0x10 [ 2825.014491] ___sys_sendmsg+0xc6/0x170 [ 2825.014503] ? sendmsg_copy_msghdr+0x160/0x160 [ 2825.014516] ? __fget_files+0x26d/0x4c0 [ 2825.014530] ? lock_downgrade+0x6d0/0x6d0 [ 2825.014542] ? find_held_lock+0x2c/0x110 [ 2825.014557] ? __fget_files+0x296/0x4c0 [ 2825.014574] ? __fget_light+0xea/0x290 [ 2825.014589] __sys_sendmsg+0xe5/0x1b0 [ 2825.014599] ? __sys_sendmsg_sock+0x40/0x40 [ 2825.014610] ? rcu_read_lock_any_held+0x75/0xa0 [ 2825.014624] ? fput_many+0x2f/0x1a0 [ 2825.014635] ? ksys_write+0x1a9/0x260 [ 2825.014650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2825.014660] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2825.014670] ? trace_hardirqs_on+0x5b/0x180 [ 2825.014683] do_syscall_64+0x33/0x40 [ 2825.014693] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2825.014700] RIP: 0033:0x7f0d4532db19 [ 2825.014711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.014717] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2825.014729] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2825.014735] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2825.014741] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2825.014747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2825.014754] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 14:28:01 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 61) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:28:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 3) 14:28:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x3}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:28:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)) 14:28:01 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000851}, 0xc001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x38, r2, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x80) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x8, 0x32, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @mlv2_report}}}}}, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x801) write$tun(r4, &(0x7f0000000180)={@val={0x0, 0x17}, @val={0x3, 0x1, 0x7, 0xd4, 0xeb}, @llc={@llc={0xe, 0xff, "e3", "9d56a465e8fab4315ed23dd28932790a9644921155ec1b4127d31c9a8e5d98a00ab3807d2c77312d325371dc960a5fbeddeccdc0faedff7a2cfe9b270c601b220960f9fb215fcd58b948946e3fd5a7540e63f426d9cf4f771e42fe2f3f79154986d535f8de8de28bf373edb405b47c4b180f879630a53ae78ed88b78296dd2c6879ab6ed713633fcbfa27884aed4cfde415e699e3b5ad918492018a3315bee144867540583c2e331b73d4d6eabc63c929ce3b6c450c41858c8501bf5f1b333226c910e49d6df16473ef7430d4f709e4725ca"}}}, 0xe3) 14:28:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) 14:28:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:28:01 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000000ffff00000000000000000007"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4840}, 0x8008000) ioctl$TUNSETLINK(r1, 0x400454cd, 0x322) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0xf8, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7e}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x24ab}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6b4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x2f6c}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syncfs(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x4, 0xf8, 0x0, 0x7ef3, 0x42, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x10, 0x40, 0x1ff, 0x82ad}}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fbdbdf251300000006001401e40000000600ed00740300000803000000060012011f00000014008100050001000000000005000200f7000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48854}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) [ 2843.058453] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2843.071238] FAULT_INJECTION: forcing a failure. [ 2843.071238] name failslab, interval 1, probability 0, space 0, times 0 [ 2843.074134] CPU: 0 PID: 28562 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2843.075712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.077567] Call Trace: [ 2843.078167] dump_stack+0x107/0x167 [ 2843.078996] should_fail.cold+0x5/0xa [ 2843.079881] ? __alloc_skb+0x6d/0x5b0 [ 2843.080750] should_failslab+0x5/0x20 [ 2843.081619] kmem_cache_alloc_node+0x55/0x330 [ 2843.081646] __alloc_skb+0x6d/0x5b0 [ 2843.081670] netlink_sendmsg+0x998/0xdf0 [ 2843.081695] ? netlink_unicast+0x7f0/0x7f0 [ 2843.081727] ? netlink_unicast+0x7f0/0x7f0 14:28:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x4}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2843.081746] __sock_sendmsg+0x154/0x190 [ 2843.081766] ____sys_sendmsg+0x70d/0x870 14:28:02 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000011100)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5f5, 0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readahead(r1, 0x8002, 0x10000001f) dup(0xffffffffffffffff) fcntl$setlease(r2, 0x400, 0x2) [ 2843.081788] ? sock_write_iter+0x3d0/0x3d0 [ 2843.081803] ? do_recvmmsg+0x6d0/0x6d0 [ 2843.081822] ? perf_trace_lock+0xac/0x490 [ 2843.081848] ? __lockdep_reset_lock+0x180/0x180 [ 2843.081864] ? perf_trace_lock+0xac/0x490 14:28:02 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 62) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2843.081881] ? SOFTIRQ_verbose+0x10/0x10 [ 2843.081905] ___sys_sendmsg+0xf3/0x170 [ 2843.081926] ? sendmsg_copy_msghdr+0x160/0x160 [ 2843.081951] ? lock_downgrade+0x6d0/0x6d0 [ 2843.081974] ? find_held_lock+0x2c/0x110 [ 2843.082005] ? __fget_files+0x296/0x4c0 [ 2843.082037] ? __fget_light+0xea/0x290 [ 2843.082066] __sys_sendmsg+0xe5/0x1b0 [ 2843.082085] ? __sys_sendmsg_sock+0x40/0x40 [ 2843.082103] ? rcu_read_lock_any_held+0x75/0xa0 [ 2843.082144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2843.082163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.082179] ? trace_hardirqs_on+0x5b/0x180 [ 2843.082203] do_syscall_64+0x33/0x40 [ 2843.082221] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2843.082235] RIP: 0033:0x7f0d4532db19 [ 2843.082254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.082265] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2843.082286] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 14:28:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 4) [ 2843.082297] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2843.082308] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2843.082320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2843.082331] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2843.094868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=28563 comm=syz-executor.2 [ 2843.100582] FAULT_INJECTION: forcing a failure. [ 2843.100582] name failslab, interval 1, probability 0, space 0, times 0 [ 2843.100605] CPU: 0 PID: 28560 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2843.100621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.100629] Call Trace: [ 2843.100654] dump_stack+0x107/0x167 [ 2843.100690] should_fail.cold+0x5/0xa [ 2843.100711] ? create_object.isra.0+0x3a/0xa20 [ 2843.100733] should_failslab+0x5/0x20 [ 2843.100751] kmem_cache_alloc+0x5b/0x310 [ 2843.100778] create_object.isra.0+0x3a/0xa20 [ 2843.100798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2843.100830] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2843.100848] ? __ip_append_data+0x2930/0x3310 [ 2843.100876] __alloc_skb+0xb1/0x5b0 [ 2843.100904] __ip_append_data+0x2930/0x3310 [ 2843.100941] ? raw_destroy+0x30/0x30 [ 2843.100975] ? ip_finish_output+0x330/0x330 [ 2843.100996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2843.101012] ? ipv4_mtu+0x1ed/0x2c0 [ 2843.101036] ? raw_destroy+0x30/0x30 [ 2843.101055] ip_append_data+0x114/0x1a0 [ 2843.101087] raw_sendmsg+0xaa6/0x29d0 [ 2843.101125] ? dst_output+0x170/0x170 [ 2843.101142] ? __lock_acquire+0x1657/0x5b00 [ 2843.101183] ? perf_trace_lock+0xac/0x490 [ 2843.101208] ? SOFTIRQ_verbose+0x10/0x10 [ 2843.101226] ? create_object.isra.0+0x3ad/0xa20 [ 2843.101248] ? __lockdep_reset_lock+0x180/0x180 [ 2843.101283] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2843.101299] ? find_held_lock+0x2c/0x110 [ 2843.101338] ? trace_hardirqs_on+0x5b/0x180 [ 2843.101362] ? dst_output+0x170/0x170 [ 2843.101384] inet_sendmsg+0x11d/0x140 [ 2843.101403] ? inet_send_prepare+0x540/0x540 [ 2843.101419] __sock_sendmsg+0x13c/0x190 [ 2843.101440] ____sys_sendmsg+0x334/0x870 [ 2843.101464] ? sock_write_iter+0x3d0/0x3d0 [ 2843.101495] ? do_recvmmsg+0x6d0/0x6d0 [ 2843.101515] ? perf_trace_lock+0xac/0x490 [ 2843.101542] ? __lockdep_reset_lock+0x180/0x180 [ 2843.101561] ? perf_pmu_nop_int+0x5/0x10 [ 2843.101576] ? merge_sched_in+0x142/0xfb0 [ 2843.101602] ___sys_sendmsg+0xf3/0x170 [ 2843.101624] ? sendmsg_copy_msghdr+0x160/0x160 [ 2843.101651] ? lock_downgrade+0x6d0/0x6d0 [ 2843.101691] ? __fget_files+0x296/0x4c0 [ 2843.101724] ? __fget_light+0xea/0x290 [ 2843.101755] __sys_sendmmsg+0x195/0x470 [ 2843.101782] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2843.101808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2843.101834] ? finish_task_switch+0x126/0x5d0 [ 2843.101854] ? __switch_to_asm+0x34/0x60 [ 2843.101878] ? __schedule+0x82c/0x1ea0 [ 2843.101909] ? io_schedule_timeout+0x140/0x140 [ 2843.101933] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2843.101952] ? ksys_write+0x1a9/0x260 [ 2843.101986] __x64_sys_sendmmsg+0x99/0x100 [ 2843.102004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.102025] do_syscall_64+0x33/0x40 [ 2843.102043] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2843.102055] RIP: 0033:0x7f70f6d55b19 [ 2843.102076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.102086] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2843.102108] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2843.102119] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2843.102131] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2843.102143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2843.102154] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2843.182169] device veth0_vlan entered promiscuous mode [ 2843.312182] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2843.514300] FAULT_INJECTION: forcing a failure. [ 2843.514300] name failslab, interval 1, probability 0, space 0, times 0 [ 2843.516910] CPU: 1 PID: 28610 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2843.518442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.520300] Call Trace: [ 2843.520895] dump_stack+0x107/0x167 [ 2843.521718] should_fail.cold+0x5/0xa [ 2843.522580] ? __alloc_skb+0x6d/0x5b0 [ 2843.523459] should_failslab+0x5/0x20 [ 2843.524311] kmem_cache_alloc_node+0x55/0x330 [ 2843.525330] __alloc_skb+0x6d/0x5b0 [ 2843.526167] __ip_append_data+0x2930/0x3310 [ 2843.527165] ? raw_destroy+0x30/0x30 [ 2843.528037] ? ip_finish_output+0x330/0x330 [ 2843.529011] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2843.530161] ? ipv4_mtu+0x1ed/0x2c0 [ 2843.530994] ? raw_destroy+0x30/0x30 [ 2843.531860] ip_append_data+0x114/0x1a0 [ 2843.532780] raw_sendmsg+0xaa6/0x29d0 [ 2843.533669] ? dst_output+0x170/0x170 [ 2843.534539] ? __lock_acquire+0x1657/0x5b00 [ 2843.535565] ? perf_trace_lock+0xac/0x490 [ 2843.536515] ? SOFTIRQ_verbose+0x10/0x10 [ 2843.537448] ? create_object.isra.0+0x3ad/0xa20 14:28:02 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x5}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2843.538519] ? __lockdep_reset_lock+0x180/0x180 [ 2843.539834] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2843.541031] ? find_held_lock+0x2c/0x110 [ 2843.541994] ? trace_hardirqs_on+0x5b/0x180 [ 2843.543005] ? dst_output+0x170/0x170 [ 2843.543905] inet_sendmsg+0x11d/0x140 [ 2843.544800] ? inet_send_prepare+0x540/0x540 [ 2843.545829] __sock_sendmsg+0x13c/0x190 [ 2843.546765] ____sys_sendmsg+0x334/0x870 [ 2843.547733] ? sock_write_iter+0x3d0/0x3d0 [ 2843.548726] ? do_recvmmsg+0x6d0/0x6d0 [ 2843.549649] ? perf_trace_lock+0xac/0x490 [ 2843.550641] ? __lockdep_reset_lock+0x180/0x180 [ 2843.551758] ? perf_trace_lock+0xac/0x490 [ 2843.552756] ___sys_sendmsg+0xf3/0x170 [ 2843.553679] ? sendmsg_copy_msghdr+0x160/0x160 [ 2843.554733] ? lock_downgrade+0x6d0/0x6d0 [ 2843.555586] ? lock_downgrade+0x6d0/0x6d0 [ 2843.556455] ? __fget_files+0x296/0x4c0 [ 2843.557412] ? __fget_light+0xea/0x290 [ 2843.558224] __sys_sendmmsg+0x195/0x470 [ 2843.559038] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2843.559935] ? lock_downgrade+0x6d0/0x6d0 14:28:02 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x158, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x146, 0x1, 0x1, 0x0, 0x10, 0x80, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x7f, {{0x7, 0x24, 0x6, 0x0, 0x0, "2204"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0x7ff, 0x5}, [@mdlm_detail={0xa5, 0x24, 0x13, 0x58, "0e79ea806ec562df775f6808b5afce427eb7d175ab80b3f00947d2033548d38222706c44ee6552d49f839979f298f88c9daa39f0fa632097a8f93d194bed4fa4b58aa5b39516fffacf2827586909e88721970fa27197a72b710c799a5ff22eef6605596059d6a5789bc7e3309176119047b13952b618b698ca9394518b1adccb7f6be5dac2e59f6894fced44c4f88a88586ebe7521bd2b98489a03ad3c611b5871"}, @mdlm_detail={0x54, 0x24, 0x13, 0x3, "75a04d874679398d736a8444fb2c8e22cd136c68a036a60a40ee93064cd542a16f4255922238612f11b2456af8a026fc878bad902f44a3c0191d8ae810e0376f186279ab8b1ac4c60d935f74521dd0f7"}, @dmm={0x7, 0x24, 0x14, 0xaa, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x18, 0xa, 0x87}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x20, 0x3a, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7, 0x6, 0xff, 0x8, 0x8}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x45, &(0x7f0000000500)=@string={0x45, 0x3, "65776323b9d2b92e047adbec842d0561545132a566df857c78432d5b4af2e482906da25d368a035c879bc39c0f872b978d12183e893fb733fc3b8403d22ec2e2d43690"}}]}) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001600010d0000000000000000000000003a308e1eac783ff964644c9dd7b47529803907b20e96249276067442f9b99b31910d82ac5ac9eeabd893b947eea59f15494af846b1f6f36b84dcfb"], 0x14}}, 0x0) capset(&(0x7f0000000bc0)={0x20071026}, &(0x7f0000000c00)={0x8b80, 0x200, 0x6, 0x7fffffff, 0x2, 0x401}) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_create(0x4, &(0x7f0000000d80)={0x0, 0x2f, 0x1, @thr={&(0x7f0000000c40), &(0x7f0000000c80)="46f2cba0db5d558f533cb7b27821191683fe2949470447f83fb6c9a1ab303787ecb4b6ec330d4fce527decb1a1951b137a54df41b1820dd2a1f2627e533682bdda70ef4ff6b723cf9be9db665ef46cbf3822d8c14e93aeda2f43506ae0bc6134f72988d0a35b70a90d249f40132c324da6bcdcebef8bee43f39bb34d5e7655cef57b3721e2b8cf586476ebee898fabd144d3234d46aecf72c46d57d51eea309cac6671c4206f193e4e71ec4d2dec0a05b8022bca0d7a36573c191c4f30b5f2671a21af40d6d8b9602c6faa93a44d84fb10fe480624fe577dfe69efd7"}}, &(0x7f0000000dc0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2843.560808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2843.561909] ? wait_for_completion_io+0x270/0x270 [ 2843.562906] ? rcu_read_lock_any_held+0x75/0xa0 [ 2843.563869] ? vfs_write+0x354/0xa70 [ 2843.564651] ? fput_many+0x2f/0x1a0 [ 2843.565371] ? ksys_write+0x1a9/0x260 [ 2843.566146] ? __ia32_sys_read+0xb0/0xb0 [ 2843.566995] __x64_sys_sendmmsg+0x99/0x100 [ 2843.567880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.568920] do_syscall_64+0x33/0x40 [ 2843.569701] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2843.570755] RIP: 0033:0x7f70f6d55b19 [ 2843.571519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.575244] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2843.576774] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2843.578209] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2843.579657] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2843.581087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2843.582521] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:28:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "bd957fd92f411ce18f895838cbaa4d10431d6f1ff91416ba3d46d46f9806d0d4794ceeeea2a5db653d90fb7d492f9319d402b6e737a65be0d6103a89d9fb0225245ad48f3efc11c748601e2c14070aedcf8790cb988fd9a9dc42560687a7ca8bdb9a4308453cbc1b30fbefed1014e06c663745c9642cd44c9b61cb210a3f9f879c67c210929c75380a32e7910a5057b77e7bd0079d943a44fa0493ff131383c73cac8ae601866e27e490ecdc05fa94e4e033e84ef40df030f991b72629e4b699180c2d59c227c254c29573c7ebe968993b2a808c7a7de46d4a28b88d3878dfcbe3e00ac859a44cc29c887800fd41813956894a5d446ed437c8d0d676163a0fe17faa72d9de2df6acb5bcfc7762dd38fb695d48b7615dd10595f5ce86bdbd42165a492854fd58fa33c189830c186cebc7f476d8f6d340a562e9a0087c1df70c3def99bb7da2e037056bcf01b6b4611021423894cb4fc49280bd814897e99effc5a6f739c7297475fc7ee6abfc739e4245326c052d4a25ff71a919639b9ec609800d000eb7b48a143081004422ab2b0c93f52f13c21fe3a69891899cddf448266e7c6c2a44a6b168b690710fa914cf98d5a4f1d2c69b15bca663d4665dbbcd7b391ad8744d8180fa9b590bf9292e69f810bffe0c7098de8c8c2ffffa7f71487a00ae4e228b96cca3de846df5ec2d175f6ad40f8f75c245cf54f6a110d2feaa211d303b13daf2ce54082d6c41e2bad767a6f7e1508cae12f627037e66993525b05b808098b463f8466860a55a97b40397e48320d933660dab0adefc9f5ee15df7b65671fe0766c1cde6e057dfa4456fb6980349c22672d422ccf7c40a788f7044cdb6c211c40d6ba5210916ba134236af42e3151733dc3f2eb243535643024472bb92205aa7d2258a3d01a597accb32dfde82c3e7455e0f6bea40bc891e1dad5030eecabe51bf31aaeef9b0b5b0e4fe36f6f60c38c2d47f5b45f8e6789650de5a746fe7f918035731eca253c276729b3ae17160a1d97a55cc95fd242c0468cdf19578820e9e0d0d1696bf169104cfc9fff87c7e56bf1fd0109ee2186d09ffb1de9b175ef691fc316cb4e4e37e15cd928f0251188a08e8e2ff4e99e4936ac771717fb3243a13b47166b8bc774651829dbeec86010c1332486690911932921093cf7bc48ee832d7b3cf479257fc9da062964d40a1cf43763af895b7b6cdf5df545036437622a0546880d889f43c6c55c86cad2bff797322df713b16d89d78d1844d098b0c69148bd773f03bc65f6fafed0b67316a172de8778874dd0a21b5a4d76fce773e418a269514d6b94172"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) [ 2843.607365] FAULT_INJECTION: forcing a failure. [ 2843.607365] name failslab, interval 1, probability 0, space 0, times 0 14:28:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) [ 2843.609771] CPU: 1 PID: 28677 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2843.611259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.612946] Call Trace: [ 2843.613513] dump_stack+0x107/0x167 [ 2843.614243] should_fail.cold+0x5/0xa [ 2843.615002] ? create_object.isra.0+0x3a/0xa20 [ 2843.615916] should_failslab+0x5/0x20 [ 2843.616669] kmem_cache_alloc+0x5b/0x310 [ 2843.617473] create_object.isra.0+0x3a/0xa20 [ 2843.618348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2843.619380] kmem_cache_alloc_node+0x169/0x330 [ 2843.620287] __alloc_skb+0x6d/0x5b0 [ 2843.621026] netlink_sendmsg+0x998/0xdf0 [ 2843.621867] ? netlink_unicast+0x7f0/0x7f0 [ 2843.622724] ? netlink_unicast+0x7f0/0x7f0 [ 2843.623601] __sock_sendmsg+0x154/0x190 [ 2843.624403] ____sys_sendmsg+0x70d/0x870 [ 2843.625232] ? sock_write_iter+0x3d0/0x3d0 [ 2843.626093] ? do_recvmmsg+0x6d0/0x6d0 [ 2843.626874] ? perf_trace_lock+0xac/0x490 [ 2843.627731] ? __lockdep_reset_lock+0x180/0x180 [ 2843.628666] ? perf_trace_lock+0xac/0x490 [ 2843.629499] ? SOFTIRQ_verbose+0x10/0x10 [ 2843.630351] ___sys_sendmsg+0xf3/0x170 [ 2843.631141] ? sendmsg_copy_msghdr+0x160/0x160 [ 2843.632084] ? lock_downgrade+0x6d0/0x6d0 [ 2843.632928] ? find_held_lock+0x2c/0x110 [ 2843.633756] ? __fget_files+0x296/0x4c0 [ 2843.634575] ? __fget_light+0xea/0x290 [ 2843.635387] __sys_sendmsg+0xe5/0x1b0 [ 2843.636163] ? __sys_sendmsg_sock+0x40/0x40 [ 2843.637034] ? rcu_read_lock_any_held+0x75/0xa0 [ 2843.638001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2843.639066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.640115] ? trace_hardirqs_on+0x5b/0x180 14:28:02 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x40814, 0x0, 0xffff, 0x3, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x81, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ff4000/0x2000)=nil) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) munlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x3, &(0x7f0000ffa000/0x4000)=nil, 0x5) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x13, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) [ 2843.640995] do_syscall_64+0x33/0x40 [ 2843.641934] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2843.642970] RIP: 0033:0x7f0d4532db19 [ 2843.643755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.647451] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2843.649005] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2843.650434] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2843.651881] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2843.653344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2843.654778] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2843.665285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:28:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 5) [ 2843.795912] udc-core: couldn't find an available UDC or it's busy [ 2843.797354] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2843.813806] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2843.895408] FAULT_INJECTION: forcing a failure. [ 2843.895408] name failslab, interval 1, probability 0, space 0, times 0 [ 2843.895447] CPU: 1 PID: 28704 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2843.895459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.895465] Call Trace: [ 2843.895495] dump_stack+0x107/0x167 [ 2843.895520] should_fail.cold+0x5/0xa [ 2843.895549] should_failslab+0x5/0x20 [ 2843.895569] __kmalloc_node_track_caller+0x74/0x3b0 [ 2843.895587] ? netlink_sendmsg+0x998/0xdf0 [ 2843.895615] __alloc_skb+0xb1/0x5b0 [ 2843.895639] netlink_sendmsg+0x998/0xdf0 [ 2843.895666] ? netlink_unicast+0x7f0/0x7f0 [ 2843.895697] ? netlink_unicast+0x7f0/0x7f0 [ 2843.895718] __sock_sendmsg+0x154/0x190 [ 2843.895738] ____sys_sendmsg+0x70d/0x870 [ 2843.895762] ? sock_write_iter+0x3d0/0x3d0 [ 2843.895778] ? do_recvmmsg+0x6d0/0x6d0 [ 2843.895798] ? perf_trace_lock+0xac/0x490 [ 2843.895825] ? __lockdep_reset_lock+0x180/0x180 [ 2843.895841] ? perf_trace_lock+0xac/0x490 [ 2843.895859] ? SOFTIRQ_verbose+0x10/0x10 [ 2843.895883] ___sys_sendmsg+0xf3/0x170 [ 2843.895906] ? sendmsg_copy_msghdr+0x160/0x160 [ 2843.895932] ? lock_downgrade+0x6d0/0x6d0 [ 2843.895955] ? find_held_lock+0x2c/0x110 [ 2843.895986] ? __fget_files+0x296/0x4c0 [ 2843.896020] ? __fget_light+0xea/0x290 [ 2843.896050] __sys_sendmsg+0xe5/0x1b0 [ 2843.896073] ? __sys_sendmsg_sock+0x40/0x40 [ 2843.896093] ? rcu_read_lock_any_held+0x75/0xa0 [ 2843.896134] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2843.896153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.896169] ? trace_hardirqs_on+0x5b/0x180 [ 2843.896196] do_syscall_64+0x33/0x40 [ 2843.896214] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2843.896226] RIP: 0033:0x7f0d4532db19 [ 2843.896247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.896258] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2843.896279] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2843.896291] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2843.896302] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2843.896314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2843.896326] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 14:28:18 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 63) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:28:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) 14:28:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:28:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 6) 14:28:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x6}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:28:18 executing program 1: lseek(0xffffffffffffffff, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000180)="ed41000000080000dff465d3e0f4655fe0f4655f000108000000040004712c0075be", 0x22, 0x2100}], 0x0, &(0x7f00000000c0)) openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x480, 0x101, 0x4}, 0x18) 14:28:18 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)) 14:28:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x81, 0x8, 0x20, 0x9d, 0x0, 0x1ff, 0x3a06, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x5, 0xfffffffe, 0x8, 0x9f73, 0x8, 0x200, 0x0, 0x8001, 0x0, 0x3f}, 0xffffffffffffffff, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4, 0x3, 0x8, 0x5, 0x0, 0x1, 0x1, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3462, 0x4, @perf_bp={&(0x7f0000000140)}, 0x8002, 0x56a, 0x101, 0x7, 0x3, 0x8, 0x59, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0xa, r1, 0xa) unshare(0x42000000) [ 2859.407848] FAULT_INJECTION: forcing a failure. [ 2859.407848] name failslab, interval 1, probability 0, space 0, times 0 [ 2859.410590] CPU: 0 PID: 28804 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2859.412156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2859.413927] Call Trace: [ 2859.414494] dump_stack+0x107/0x167 [ 2859.415287] should_fail.cold+0x5/0xa [ 2859.416133] ? create_object.isra.0+0x3a/0xa20 [ 2859.416905] FAULT_INJECTION: forcing a failure. [ 2859.416905] name failslab, interval 1, probability 0, space 0, times 0 [ 2859.417138] should_failslab+0x5/0x20 [ 2859.420233] kmem_cache_alloc+0x5b/0x310 [ 2859.421111] create_object.isra.0+0x3a/0xa20 [ 2859.422055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2859.423172] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2859.424255] ? netlink_sendmsg+0x998/0xdf0 [ 2859.425163] __alloc_skb+0xb1/0x5b0 [ 2859.425949] netlink_sendmsg+0x998/0xdf0 [ 2859.426823] ? netlink_unicast+0x7f0/0x7f0 [ 2859.427767] ? netlink_unicast+0x7f0/0x7f0 [ 2859.428671] __sock_sendmsg+0x154/0x190 [ 2859.429518] ____sys_sendmsg+0x70d/0x870 [ 2859.430386] ? sock_write_iter+0x3d0/0x3d0 [ 2859.431296] ? do_recvmmsg+0x6d0/0x6d0 [ 2859.432151] ? perf_trace_lock+0xac/0x490 [ 2859.433053] ? __lockdep_reset_lock+0x180/0x180 [ 2859.434034] ? perf_trace_lock+0xac/0x490 [ 2859.434923] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.435801] ___sys_sendmsg+0xf3/0x170 [ 2859.436631] ? sendmsg_copy_msghdr+0x160/0x160 [ 2859.437631] ? lock_downgrade+0x6d0/0x6d0 [ 2859.438538] ? find_held_lock+0x2c/0x110 [ 2859.439440] ? __fget_files+0x296/0x4c0 [ 2859.440321] ? __fget_light+0xea/0x290 [ 2859.441171] __sys_sendmsg+0xe5/0x1b0 [ 2859.441997] ? __sys_sendmsg_sock+0x40/0x40 [ 2859.442929] ? rcu_read_lock_any_held+0x75/0xa0 [ 2859.443960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2859.445101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2859.446205] ? trace_hardirqs_on+0x5b/0x180 [ 2859.447135] do_syscall_64+0x33/0x40 [ 2859.447946] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2859.449034] RIP: 0033:0x7f0d4532db19 [ 2859.449826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2859.453806] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2859.455441] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2859.456974] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2859.458495] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2859.460067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2859.461630] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2859.463216] CPU: 1 PID: 28805 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2859.464697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2859.466368] Call Trace: [ 2859.466916] dump_stack+0x107/0x167 [ 2859.467664] should_fail.cold+0x5/0xa [ 2859.468436] ? create_object.isra.0+0x3a/0xa20 [ 2859.469393] should_failslab+0x5/0x20 [ 2859.470160] kmem_cache_alloc+0x5b/0x310 [ 2859.471008] create_object.isra.0+0x3a/0xa20 [ 2859.471918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2859.472943] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2859.473989] ? __ip_append_data+0x2930/0x3310 [ 2859.474915] __alloc_skb+0xb1/0x5b0 [ 2859.475699] __ip_append_data+0x2930/0x3310 [ 2859.476607] ? raw_destroy+0x30/0x30 [ 2859.477385] ? ip_finish_output+0x330/0x330 [ 2859.478284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2859.479315] ? ipv4_mtu+0x1ed/0x2c0 [ 2859.480072] ? raw_destroy+0x30/0x30 [ 2859.480849] ip_append_data+0x114/0x1a0 [ 2859.481678] raw_sendmsg+0xaa6/0x29d0 [ 2859.482477] ? dst_output+0x170/0x170 [ 2859.483265] ? __lock_acquire+0x1657/0x5b00 [ 2859.484183] ? perf_trace_lock+0xac/0x490 [ 2859.485031] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.485863] ? create_object.isra.0+0x3ad/0xa20 [ 2859.486821] ? __lockdep_reset_lock+0x180/0x180 [ 2859.487813] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2859.488884] ? find_held_lock+0x2c/0x110 [ 2859.489744] ? trace_hardirqs_on+0x5b/0x180 [ 2859.490637] ? dst_output+0x170/0x170 [ 2859.491427] inet_sendmsg+0x11d/0x140 [ 2859.492215] ? inet_send_prepare+0x540/0x540 [ 2859.493122] __sock_sendmsg+0x13c/0x190 [ 2859.493959] ____sys_sendmsg+0x334/0x870 [ 2859.494803] ? sock_write_iter+0x3d0/0x3d0 [ 2859.495689] ? do_recvmmsg+0x6d0/0x6d0 [ 2859.496500] ? perf_trace_lock+0xac/0x490 [ 2859.497365] ? __lockdep_reset_lock+0x180/0x180 [ 2859.498313] ? perf_trace_lock+0xac/0x490 [ 2859.499174] ___sys_sendmsg+0xf3/0x170 [ 2859.500000] ? sendmsg_copy_msghdr+0x160/0x160 [ 2859.500941] ? lock_downgrade+0x6d0/0x6d0 [ 2859.501804] ? lock_downgrade+0x6d0/0x6d0 [ 2859.502667] ? __fget_files+0x296/0x4c0 [ 2859.503507] ? __fget_light+0xea/0x290 [ 2859.504316] __sys_sendmmsg+0x195/0x470 [ 2859.505153] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2859.506052] ? lock_downgrade+0x6d0/0x6d0 [ 2859.506930] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2859.507940] ? wait_for_completion_io+0x270/0x270 [ 2859.508919] ? rcu_read_lock_any_held+0x75/0xa0 [ 2859.509868] ? vfs_write+0x354/0xa70 [ 2859.510623] ? fput_many+0x2f/0x1a0 [ 2859.511377] ? ksys_write+0x1a9/0x260 [ 2859.512165] ? __ia32_sys_read+0xb0/0xb0 [ 2859.512992] __x64_sys_sendmmsg+0x99/0x100 [ 2859.513852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2859.514900] do_syscall_64+0x33/0x40 [ 2859.515668] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2859.516745] RIP: 0033:0x7f70f6d55b19 [ 2859.517510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2859.521163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2859.521313] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2859.524737] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2859.526202] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2859.527659] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2859.529142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2859.530601] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2859.539183] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:28:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x7}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:28:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 7) 14:28:18 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) syz_mount_image$iso9660(0x0, 0x0, 0x100, 0x1, &(0x7f0000001240)=[{0x0, 0x0, 0x8000000000000002}], 0x0, 0x0) 14:28:18 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 64) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:28:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "bd957fd92f411ce18f895838cbaa4d10431d6f1ff91416ba3d46d46f9806d0d4794ceeeea2a5db653d90fb7d492f9319d402b6e737a65be0d6103a89d9fb0225245ad48f3efc11c748601e2c14070aedcf8790cb988fd9a9dc42560687a7ca8bdb9a4308453cbc1b30fbefed1014e06c663745c9642cd44c9b61cb210a3f9f879c67c210929c75380a32e7910a5057b77e7bd0079d943a44fa0493ff131383c73cac8ae601866e27e490ecdc05fa94e4e033e84ef40df030f991b72629e4b699180c2d59c227c254c29573c7ebe968993b2a808c7a7de46d4a28b88d3878dfcbe3e00ac859a44cc29c887800fd41813956894a5d446ed437c8d0d676163a0fe17faa72d9de2df6acb5bcfc7762dd38fb695d48b7615dd10595f5ce86bdbd42165a492854fd58fa33c189830c186cebc7f476d8f6d340a562e9a0087c1df70c3def99bb7da2e037056bcf01b6b4611021423894cb4fc49280bd814897e99effc5a6f739c7297475fc7ee6abfc739e4245326c052d4a25ff71a919639b9ec609800d000eb7b48a143081004422ab2b0c93f52f13c21fe3a69891899cddf448266e7c6c2a44a6b168b690710fa914cf98d5a4f1d2c69b15bca663d4665dbbcd7b391ad8744d8180fa9b590bf9292e69f810bffe0c7098de8c8c2ffffa7f71487a00ae4e228b96cca3de846df5ec2d175f6ad40f8f75c245cf54f6a110d2feaa211d303b13daf2ce54082d6c41e2bad767a6f7e1508cae12f627037e66993525b05b808098b463f8466860a55a97b40397e48320d933660dab0adefc9f5ee15df7b65671fe0766c1cde6e057dfa4456fb6980349c22672d422ccf7c40a788f7044cdb6c211c40d6ba5210916ba134236af42e3151733dc3f2eb243535643024472bb92205aa7d2258a3d01a597accb32dfde82c3e7455e0f6bea40bc891e1dad5030eecabe51bf31aaeef9b0b5b0e4fe36f6f60c38c2d47f5b45f8e6789650de5a746fe7f918035731eca253c276729b3ae17160a1d97a55cc95fd242c0468cdf19578820e9e0d0d1696bf169104cfc9fff87c7e56bf1fd0109ee2186d09ffb1de9b175ef691fc316cb4e4e37e15cd928f0251188a08e8e2ff4e99e4936ac771717fb3243a13b47166b8bc774651829dbeec86010c1332486690911932921093cf7bc48ee832d7b3cf479257fc9da062964d40a1cf43763af895b7b6cdf5df545036437622a0546880d889f43c6c55c86cad2bff797322df713b16d89d78d1844d098b0c69148bd773f03bc65f6fafed0b67316a172de8778874dd0a21b5a4d76fce773e418a269514d6b94172"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) [ 2859.821138] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2859.865309] FAULT_INJECTION: forcing a failure. [ 2859.865309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2859.868089] CPU: 1 PID: 28822 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2859.869526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2859.871236] Call Trace: [ 2859.871807] dump_stack+0x107/0x167 [ 2859.872563] should_fail.cold+0x5/0xa [ 2859.873346] _copy_from_iter_full+0x201/0xa60 [ 2859.874267] ? __virt_addr_valid+0x128/0x350 [ 2859.875166] ? __check_object_size+0x319/0x440 [ 2859.876106] netlink_sendmsg+0x879/0xdf0 [ 2859.876945] ? netlink_unicast+0x7f0/0x7f0 [ 2859.877816] ? netlink_unicast+0x7f0/0x7f0 [ 2859.878693] __sock_sendmsg+0x154/0x190 [ 2859.879530] ____sys_sendmsg+0x70d/0x870 [ 2859.880358] ? sock_write_iter+0x3d0/0x3d0 [ 2859.881216] ? do_recvmmsg+0x6d0/0x6d0 [ 2859.882035] ? perf_trace_lock+0xac/0x490 [ 2859.882887] ? __lockdep_reset_lock+0x180/0x180 [ 2859.883866] ? perf_trace_lock+0xac/0x490 [ 2859.884709] ? SOFTIRQ_verbose+0x10/0x10 [ 2859.885567] ___sys_sendmsg+0xf3/0x170 [ 2859.886396] ? sendmsg_copy_msghdr+0x160/0x160 [ 2859.887348] ? lock_downgrade+0x6d0/0x6d0 [ 2859.888220] ? find_held_lock+0x2c/0x110 [ 2859.889086] ? __fget_files+0x296/0x4c0 [ 2859.889941] ? __fget_light+0xea/0x290 [ 2859.890756] __sys_sendmsg+0xe5/0x1b0 [ 2859.891559] ? __sys_sendmsg_sock+0x40/0x40 [ 2859.892442] ? rcu_read_lock_any_held+0x75/0xa0 [ 2859.893406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2859.894461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2859.895538] ? trace_hardirqs_on+0x5b/0x180 [ 2859.896450] do_syscall_64+0x33/0x40 [ 2859.897207] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2859.898245] RIP: 0033:0x7f0d4532db19 [ 2859.899004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2859.902828] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2859.904416] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2859.905902] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2859.907368] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2859.908834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2859.910369] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2860.009188] FAULT_INJECTION: forcing a failure. [ 2860.009188] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.011764] CPU: 1 PID: 28828 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2860.013211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.014921] Call Trace: [ 2860.015494] dump_stack+0x107/0x167 [ 2860.016265] should_fail.cold+0x5/0xa [ 2860.017064] ? create_object.isra.0+0x3a/0xa20 [ 2860.018027] should_failslab+0x5/0x20 [ 2860.018824] kmem_cache_alloc+0x5b/0x310 [ 2860.019678] create_object.isra.0+0x3a/0xa20 [ 2860.020588] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2860.021645] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2860.022693] ? __ip_append_data+0x2930/0x3310 [ 2860.023627] __alloc_skb+0xb1/0x5b0 [ 2860.024389] __ip_append_data+0x2930/0x3310 [ 2860.025311] ? raw_destroy+0x30/0x30 [ 2860.026089] ? ip_finish_output+0x330/0x330 [ 2860.026976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2860.028031] ? ipv4_mtu+0x1ed/0x2c0 [ 2860.028789] ? raw_destroy+0x30/0x30 [ 2860.029554] ip_append_data+0x114/0x1a0 [ 2860.030385] raw_sendmsg+0xaa6/0x29d0 [ 2860.031183] ? dst_output+0x170/0x170 [ 2860.031984] ? __lock_acquire+0x1657/0x5b00 [ 2860.032899] ? perf_trace_lock+0xac/0x490 [ 2860.033779] ? SOFTIRQ_verbose+0x10/0x10 [ 2860.034614] ? create_object.isra.0+0x3ad/0xa20 [ 2860.035596] ? __lockdep_reset_lock+0x180/0x180 [ 2860.036580] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2860.037645] ? find_held_lock+0x2c/0x110 [ 2860.038503] ? trace_hardirqs_on+0x5b/0x180 [ 2860.039407] ? dst_output+0x170/0x170 [ 2860.040207] inet_sendmsg+0x11d/0x140 [ 2860.041001] ? inet_send_prepare+0x540/0x540 [ 2860.041918] __sock_sendmsg+0x13c/0x190 [ 2860.042743] ____sys_sendmsg+0x334/0x870 [ 2860.043617] ? sock_write_iter+0x3d0/0x3d0 [ 2860.044494] ? do_recvmmsg+0x6d0/0x6d0 [ 2860.045300] ? perf_trace_lock+0xac/0x490 [ 2860.046172] ? __lockdep_reset_lock+0x180/0x180 [ 2860.047133] ? perf_trace_lock+0xac/0x490 [ 2860.048017] ___sys_sendmsg+0xf3/0x170 [ 2860.048824] ? sendmsg_copy_msghdr+0x160/0x160 [ 2860.049771] ? lock_downgrade+0x6d0/0x6d0 [ 2860.050634] ? lock_downgrade+0x6d0/0x6d0 [ 2860.051510] ? __fget_files+0x296/0x4c0 [ 2860.052352] ? __fget_light+0xea/0x290 [ 2860.053165] __sys_sendmmsg+0x195/0x470 [ 2860.053994] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2860.054884] ? lock_downgrade+0x6d0/0x6d0 [ 2860.055773] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2860.056790] ? wait_for_completion_io+0x270/0x270 [ 2860.057788] ? rcu_read_lock_any_held+0x75/0xa0 [ 2860.058749] ? vfs_write+0x354/0xa70 [ 2860.059538] ? fput_many+0x2f/0x1a0 [ 2860.060295] ? ksys_write+0x1a9/0x260 [ 2860.061087] ? __ia32_sys_read+0xb0/0xb0 [ 2860.061934] __x64_sys_sendmmsg+0x99/0x100 [ 2860.062811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2860.063884] do_syscall_64+0x33/0x40 [ 2860.064654] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2860.065710] RIP: 0033:0x7f70f6d55b19 [ 2860.066479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.070241] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2860.071817] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2860.073278] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2860.074734] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2860.076214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.077690] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:28:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x9}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:28:34 executing program 1: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x5000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "cc06a2b5d0f4168a3adc23660810a419"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) r3 = signalfd(r0, &(0x7f0000000400)={[0x797cb22e]}, 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40688d5}, 0x20000000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x110, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x110}}, 0x840) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}}, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x41) read$hidraw(r0, &(0x7f0000000a00)=""/86, 0x56) unshare(0x40000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880d}, 0x0) 14:28:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)) 14:28:34 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 65) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:28:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:28:34 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r0, 0x8000000) syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r0}}, 0xfffff801) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x179) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x14, 0x7, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x40004) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) fgetxattr(r2, &(0x7f0000001900)=@random={'user.', '\x00'}, &(0x7f0000001940)=""/54, 0x36) syz_io_uring_setup(0x41cc, &(0x7f0000000300)={0x0, 0x46e0, 0x20, 0x2, 0xd8, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000380)={'veth0\x00'}) 14:28:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) 14:28:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 8) [ 2875.425298] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2875.444272] FAULT_INJECTION: forcing a failure. [ 2875.444272] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.444296] CPU: 0 PID: 28949 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2875.444308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.444315] Call Trace: [ 2875.444339] dump_stack+0x107/0x167 [ 2875.444366] should_fail.cold+0x5/0xa [ 2875.444389] ? create_object.isra.0+0x3a/0xa20 [ 2875.444420] should_failslab+0x5/0x20 [ 2875.444440] kmem_cache_alloc+0x5b/0x310 [ 2875.444468] create_object.isra.0+0x3a/0xa20 [ 2875.444489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2875.444517] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2875.444537] ? __ip_append_data+0x2930/0x3310 [ 2875.444565] __alloc_skb+0xb1/0x5b0 [ 2875.444593] __ip_append_data+0x2930/0x3310 [ 2875.444631] ? raw_destroy+0x30/0x30 [ 2875.444666] ? ip_finish_output+0x330/0x330 [ 2875.444688] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2875.444705] ? ipv4_mtu+0x1ed/0x2c0 [ 2875.444730] ? raw_destroy+0x30/0x30 [ 2875.444749] ip_append_data+0x114/0x1a0 [ 2875.444783] raw_sendmsg+0xaa6/0x29d0 [ 2875.444820] ? dst_output+0x170/0x170 [ 2875.444840] ? __lock_acquire+0x1657/0x5b00 [ 2875.444881] ? perf_trace_lock+0xac/0x490 [ 2875.444900] ? SOFTIRQ_verbose+0x10/0x10 [ 2875.444918] ? create_object.isra.0+0x3ad/0xa20 [ 2875.444941] ? __lockdep_reset_lock+0x180/0x180 [ 2875.444977] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2875.444994] ? find_held_lock+0x2c/0x110 [ 2875.445033] ? trace_hardirqs_on+0x5b/0x180 [ 2875.445058] ? dst_output+0x170/0x170 [ 2875.445081] inet_sendmsg+0x11d/0x140 [ 2875.445100] ? inet_send_prepare+0x540/0x540 [ 2875.445117] __sock_sendmsg+0x13c/0x190 [ 2875.445139] ____sys_sendmsg+0x334/0x870 [ 2875.445163] ? sock_write_iter+0x3d0/0x3d0 [ 2875.445180] ? do_recvmmsg+0x6d0/0x6d0 [ 2875.445200] ? perf_trace_lock+0xac/0x490 [ 2875.445229] ? __lockdep_reset_lock+0x180/0x180 [ 2875.445247] ? perf_trace_lock+0xac/0x490 [ 2875.445275] ___sys_sendmsg+0xf3/0x170 [ 2875.445299] ? sendmsg_copy_msghdr+0x160/0x160 [ 2875.445327] ? lock_downgrade+0x6d0/0x6d0 [ 2875.445358] ? lock_downgrade+0x6d0/0x6d0 [ 2875.445386] ? __fget_files+0x296/0x4c0 [ 2875.445420] ? __fget_light+0xea/0x290 [ 2875.445452] __sys_sendmmsg+0x195/0x470 [ 2875.445480] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2875.445507] ? lock_downgrade+0x6d0/0x6d0 [ 2875.445551] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2875.445578] ? wait_for_completion_io+0x270/0x270 [ 2875.445602] ? rcu_read_lock_any_held+0x75/0xa0 [ 2875.445620] ? vfs_write+0x354/0xa70 [ 2875.445645] ? fput_many+0x2f/0x1a0 [ 2875.445668] ? ksys_write+0x1a9/0x260 [ 2875.445689] ? __ia32_sys_read+0xb0/0xb0 [ 2875.445729] __x64_sys_sendmmsg+0x99/0x100 [ 2875.445755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.445780] do_syscall_64+0x33/0x40 [ 2875.445800] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2875.445819] RIP: 0033:0x7f70f6d55b19 [ 2875.445840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.445852] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2875.445876] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2875.445888] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2875.445900] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2875.445912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2875.445925] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2875.467348] FAT-fs (loop5): bogus number of reserved sectors [ 2875.467359] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2875.471350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:28:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0xa}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2875.539645] FAULT_INJECTION: forcing a failure. [ 2875.539645] name failslab, interval 1, probability 0, space 0, times 0 14:28:34 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./mnt\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{}]}, 0x2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001800)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) utimensat(r2, &(0x7f0000001840)='./mnt\x00', &(0x7f0000001880)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x100) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./mnt\x00', 0x80000001, 0x6, &(0x7f0000001680)=[{&(0x7f0000000280)="3b4077b7f98da91ad37f85cd3afa5757ce67400ed3a66466f8e66ce31fc2a042519b6a06e86d2956c5cf45dd7be5a2788412ce402ac9fe1f4560ffc4b24d8240ed0a575fb1c1586e37f90b90463e19659e88c926d262bb2c1de489f25c80a88fc62ee9a7a65889119f3233a1f84a46e3b6395e9f1fd979d225802e2376d3fbb45924", 0x82, 0x81}, {&(0x7f0000000380)="af109a2df1a26cdd13c76bb029d045c19980dc9654d029dbb98da4b4237cacb5da040c41d5a673a83384f0ed2ecfbcc03353cf05a21e87370e63a084af7aa3d46d85ef83049e28099a4bda0c0002a2c20b22002964ba32ffa8f364c49b6f20c7c041808348e2aa1be300f1a40ab09656e68a5c7fd3911b1a564d13d893126e", 0x7f, 0x4}, {&(0x7f0000000500)="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", 0x1000, 0x9}, {&(0x7f0000001500)="0ac80f75bc070c15b93995dc8109378283f7a2861c301f0c0e7e0af0d06f2ffdc57c21d56fcfcd7f1583a1ab9e48d0edc0dcbe3f5c84e5258d3b773311c97f829e1b448d1f5b636489dc1a1c9c9ab06eeaacb31d4d4989f746ac298068e2aab96984ea9914fbaba252d432232201f278ff0f3a74280dcecc87c72cc0d8edf07b60e767eda45132429f7453e79d782d0c9bde9c92779912aed08ff5708ab99b358c9e5544a1d38ee5fceb1870b773356b540c7c97dbaaa5314a5d521e4e95f87c36a85bbc3b4f05b279c0e8c3406f2f64897df7db", 0xd4, 0x1}, {&(0x7f0000000400)="5132b829ced7e006fc7d0d74c956fdcb586e96d73a70c3b9990806d931696be64bec1b50dc93baaf0dc33984c7383b4d6a4ff00001b238dffb523df91f168c66411c568a726bddef1f4bf185002c06383e7d9580be59fc72c257ce6221d66fc908c07ec7b535fc7f2599345a93d18cec9c5fcaec04b64d652b4881bfc8dc056c1e688d993f615fefa6a0334092a9f6167e2a13964cf963bb53b5affb2831", 0x9e, 0x100}, {&(0x7f0000001600)="447ecb5d2ada5ac4184f41495b5db873a4fcf66c65be9b69fbadc2b3f3e35b77b7336d8c24490e5b63939dd2d40f721ca59cdf2caac72a3f8ac2a544206f5ab2c9", 0x41, 0x3}], 0x1149d0, &(0x7f0000001740)={[{@utf8no}, {@shortname_lower}, {@fat=@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@numtail}, {@shortname_mixed}, {@numtail}, {@utf8no}, {@rodir}], [{@euid_eq={'euid', 0x3d, r1}}]}) lgetxattr(&(0x7f0000000000)='mnt/encrypted_dir\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000200)=""/116, 0x74) [ 2875.539667] CPU: 0 PID: 28978 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2875.539679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.539686] Call Trace: [ 2875.539708] dump_stack+0x107/0x167 14:28:34 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 66) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2875.539735] should_fail.cold+0x5/0xa [ 2875.539752] ? fib_nl2rule.isra.0+0x333/0x1db0 [ 2875.539770] ? fib_nl2rule.isra.0+0x333/0x1db0 [ 2875.539793] should_failslab+0x5/0x20 [ 2875.539812] __kmalloc+0x72/0x390 [ 2875.539838] fib_nl2rule.isra.0+0x333/0x1db0 [ 2875.539861] ? fib_rules_event+0x5d0/0x5d0 14:28:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 9) [ 2875.539885] ? __nla_parse+0x3e/0x50 [ 2875.539909] fib_nl_newrule+0x29e/0x1b10 [ 2875.539936] ? lock_release+0x680/0x680 [ 2875.539963] ? fib_rules_seq_read+0x110/0x110 [ 2875.539997] ? __mutex_lock+0x4fe/0x10b0 [ 2875.540015] ? __lockdep_reset_lock+0x180/0x180 [ 2875.540065] ? security_capable+0x95/0xc0 [ 2875.540096] ? fib_rules_seq_read+0x110/0x110 14:28:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0xf}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2875.540115] rtnetlink_rcv_msg+0x41e/0xbb0 [ 2875.540138] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2875.540159] ? perf_trace_lock+0xac/0x490 [ 2875.540187] ? __lockdep_reset_lock+0x180/0x180 [ 2875.540214] netlink_rcv_skb+0x14b/0x430 [ 2875.540233] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2875.540254] ? netlink_ack+0xab0/0xab0 [ 2875.540273] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2875.540303] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2875.540323] ? is_vmalloc_addr+0x7b/0xb0 [ 2875.540348] netlink_unicast+0x549/0x7f0 [ 2875.540382] ? netlink_attachskb+0x870/0x870 [ 2875.540400] ? __virt_addr_valid+0x128/0x350 [ 2875.540432] netlink_sendmsg+0x90f/0xdf0 [ 2875.540459] ? netlink_unicast+0x7f0/0x7f0 [ 2875.540492] ? netlink_unicast+0x7f0/0x7f0 [ 2875.540516] __sock_sendmsg+0x154/0x190 [ 2875.540541] ____sys_sendmsg+0x70d/0x870 [ 2875.540564] ? sock_write_iter+0x3d0/0x3d0 [ 2875.540580] ? do_recvmmsg+0x6d0/0x6d0 [ 2875.540600] ? perf_trace_lock+0xac/0x490 [ 2875.540627] ? __lockdep_reset_lock+0x180/0x180 [ 2875.540644] ? perf_trace_lock+0xac/0x490 [ 2875.540662] ? SOFTIRQ_verbose+0x10/0x10 [ 2875.540687] ___sys_sendmsg+0xf3/0x170 [ 2875.540710] ? sendmsg_copy_msghdr+0x160/0x160 [ 2875.540737] ? lock_downgrade+0x6d0/0x6d0 [ 2875.540761] ? find_held_lock+0x2c/0x110 [ 2875.540792] ? __fget_files+0x296/0x4c0 [ 2875.540825] ? __fget_light+0xea/0x290 14:28:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0xa0001c, &(0x7f0000000200)=ANY=[]) r0 = memfd_create(&(0x7f0000000580)='\x02\x9as\xabcBh\xeb?>zA-\xb5\xe7\x1f\x18\x82\b\xd1qT\x19\x95\xb1\xa4d\xdcUM:\xae\x89\x06F\xb6d\x8c\x89\xe3\xaf\xb0\x84\xf8&\xe8\xdd\x0f%\xee\xb6\xd3x\t\x13\"\xa8\xf78,\xbdIT\x9cb\f\xa8C\x81!#\x05\x00~\xda\x87\xdf1\x87\xae\x8b\xbc\x1fn)\x85%a7\x99\x17N\xa8e\x9bW)7\xe7J\xb0\x1a\x01H\xa6\xed\xfc\xff\x82\"\x82r\xac\xbe\xb7s\xa6\x04\xc3\xe6k\xa0\xdb8\xbd\x9d\"\xc1j\x00\xe5j\xd1\x94`\xc2\xd5\rG6*\x95\xf8J\xf7\xd0\xb4\xce\x7f0\"\xd8F\xf4\x96\xd4\xee\xb8\xb5\x90@V\xb3\x02\xca\x04\xa9\a\xa4J`\x9f\x8074Fdfx\xfe\x1e\xda\xb8\xd0\x0e\xd3\xe8\x1c\x93VY\x91}\xf9x\x9bY\x82\x9cD\xb8\x94M\x94a\x96x\xae\xcd8\xf4\x02X\xb8P}@\xc1\xefJ.UD\xfe\x04\xa3\x13\xf2A\x1cV\xda/u,o\xb4\xa3^iJ\xc0p\xf6m\xea\xd3\xd5\xa0\xfa/\xd6A\xfb\xd4\v\xf2\x94\xf3\x01\b\xa9]{\x87\xe5\x1b\xb4', 0x5) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') creat(&(0x7f0000000100)='./file2\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0xc3c2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x509441, 0x18e) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r2, &(0x7f00000003c0)="0289819eecd945439d8a8b16bf2bf2b67eefb591f4cf4db9ead300c6ac8ba94f7d4a804292338b2abd8472d8beffa0ce3669f0087fe6e41dd4cf60d158da85532ae8", 0x42) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x4, 0x0, &(0x7f0000000340)) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x4, 0x0, &(0x7f0000000340)) fcntl$dupfd(r4, 0x0, r4) sendfile(r1, r3, 0x0, 0x100000001) [ 2875.540855] __sys_sendmsg+0xe5/0x1b0 [ 2875.540875] ? __sys_sendmsg_sock+0x40/0x40 [ 2875.540894] ? rcu_read_lock_any_held+0x75/0xa0 [ 2875.540936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.540955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.540971] ? trace_hardirqs_on+0x5b/0x180 [ 2875.540996] do_syscall_64+0x33/0x40 [ 2875.541014] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2875.541028] RIP: 0033:0x7f0d4532db19 [ 2875.541049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:28:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x48}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2875.541060] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 14:28:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000480)={'veth1\x00', &(0x7f0000000540)=@ethtool_drvinfo={0x3, "6e087fad4217a877e45ce6dccde65f4a3522d45d8c370f8003c9a9b29ff7cdc6", "5597790171e2ee27a0101d3704e50cd7c0404f11b3e6e7ee59115bc91b382a23", "abd36fb297dc5aaf6ec480a003b182b715d1f82918c0cbfa79fc01c35759d0ef", "98487222de8f0e95047cf7846af637dccc75478c3e945cb5b9988acefd9c5c62", "bd1f7e9527f1ee03fdadb3dbafab7f52367c4238106d7b4edcc97d8bdac8ecac", "229b4c26d38c30bdb52995b6", 0xfffeffff, 0x1, 0x3179, 0x20, 0x9}}) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = openat(r0, &(0x7f0000001a00)='./file1\x00', 0x42, 0x4) io_setup(0x5, &(0x7f0000000040)=0x0) chroot(&(0x7f0000000440)='./file2\x00') io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r3, 0x0}]) openat$incfs(r3, &(0x7f0000000300)='.pending_reads\x00', 0xc6000, 0x8) unlink(&(0x7f0000000340)='./file2\x00') stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) sendfile(r1, r2, 0x0, 0x100000001) [ 2875.541082] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 14:28:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) [ 2875.541094] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2875.541106] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2875.541118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2875.541130] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2875.598686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29048 comm=syz-executor.1 [ 2875.698015] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2875.716034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28976 comm=syz-executor.1 [ 2875.964358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2875.964398] FAULT_INJECTION: forcing a failure. [ 2875.964398] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.964419] CPU: 0 PID: 29139 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2875.964431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.964438] Call Trace: [ 2875.964471] dump_stack+0x107/0x167 [ 2875.964499] should_fail.cold+0x5/0xa [ 2875.964522] ? create_object.isra.0+0x3a/0xa20 [ 2875.964545] should_failslab+0x5/0x20 [ 2875.964566] kmem_cache_alloc+0x5b/0x310 [ 2875.964594] create_object.isra.0+0x3a/0xa20 [ 2875.964615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2875.964641] __kmalloc+0x16e/0x390 [ 2875.964671] fib_nl2rule.isra.0+0x333/0x1db0 [ 2875.964693] ? SOFTIRQ_verbose+0x10/0x10 [ 2875.964712] ? fib_rules_event+0x5d0/0x5d0 [ 2875.964736] ? __nla_parse+0x3e/0x50 [ 2875.964763] fib_nl_newrule+0x29e/0x1b10 [ 2875.964788] ? lock_release+0x680/0x680 [ 2875.964817] ? fib_rules_seq_read+0x110/0x110 [ 2875.964852] ? __mutex_lock+0x4fe/0x10b0 [ 2875.964870] ? __lockdep_reset_lock+0x180/0x180 [ 2875.964925] ? security_capable+0x95/0xc0 [ 2875.964958] ? fib_rules_seq_read+0x110/0x110 [ 2875.964978] rtnetlink_rcv_msg+0x41e/0xbb0 [ 2875.965001] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2875.965022] ? perf_trace_lock+0xac/0x490 [ 2875.965051] ? __lockdep_reset_lock+0x180/0x180 [ 2875.965080] netlink_rcv_skb+0x14b/0x430 [ 2875.965099] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2875.965120] ? netlink_ack+0xab0/0xab0 [ 2875.965140] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2875.965172] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2875.965192] ? is_vmalloc_addr+0x7b/0xb0 [ 2875.965218] netlink_unicast+0x549/0x7f0 [ 2875.965245] ? netlink_attachskb+0x870/0x870 [ 2875.965263] ? __virt_addr_valid+0x128/0x350 [ 2875.965297] netlink_sendmsg+0x90f/0xdf0 [ 2875.965325] ? netlink_unicast+0x7f0/0x7f0 [ 2875.965358] ? netlink_unicast+0x7f0/0x7f0 [ 2875.965379] __sock_sendmsg+0x154/0x190 [ 2875.965400] ____sys_sendmsg+0x70d/0x870 [ 2875.965424] ? sock_write_iter+0x3d0/0x3d0 [ 2875.965441] ? do_recvmmsg+0x6d0/0x6d0 [ 2875.965460] ? perf_trace_lock+0xac/0x490 [ 2875.965488] ? __lockdep_reset_lock+0x180/0x180 [ 2875.965505] ? perf_trace_lock+0xac/0x490 [ 2875.965523] ? SOFTIRQ_verbose+0x10/0x10 [ 2875.965549] ___sys_sendmsg+0xf3/0x170 [ 2875.965572] ? sendmsg_copy_msghdr+0x160/0x160 [ 2875.965601] ? lock_downgrade+0x6d0/0x6d0 [ 2875.965628] ? find_held_lock+0x2c/0x110 [ 2875.965660] ? __fget_files+0x296/0x4c0 [ 2875.965694] ? __fget_light+0xea/0x290 [ 2875.965731] __sys_sendmsg+0xe5/0x1b0 [ 2875.965751] ? __sys_sendmsg_sock+0x40/0x40 [ 2875.965770] ? rcu_read_lock_any_held+0x75/0xa0 [ 2875.965813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.965832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.965848] ? trace_hardirqs_on+0x5b/0x180 [ 2875.965874] do_syscall_64+0x33/0x40 [ 2875.965893] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2875.965907] RIP: 0033:0x7f0d4532db19 [ 2875.965927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.965937] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2875.965960] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2875.965972] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2875.965984] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2875.965995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2875.966007] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2875.977448] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2875.991445] FAULT_INJECTION: forcing a failure. [ 2875.991445] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.991474] CPU: 1 PID: 29140 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2875.991486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.991493] Call Trace: [ 2875.991518] dump_stack+0x107/0x167 [ 2875.991545] should_fail.cold+0x5/0xa [ 2875.991568] ? create_object.isra.0+0x3a/0xa20 [ 2875.991601] should_failslab+0x5/0x20 [ 2875.991620] kmem_cache_alloc+0x5b/0x310 [ 2875.991648] create_object.isra.0+0x3a/0xa20 [ 2875.991668] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2875.991696] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2875.991715] ? __ip_append_data+0x2930/0x3310 [ 2875.991744] __alloc_skb+0xb1/0x5b0 [ 2875.991771] __ip_append_data+0x2930/0x3310 [ 2875.991809] ? raw_destroy+0x30/0x30 [ 2875.991843] ? ip_finish_output+0x330/0x330 [ 2875.991864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2875.991881] ? ipv4_mtu+0x1ed/0x2c0 [ 2875.991905] ? raw_destroy+0x30/0x30 [ 2875.991924] ip_append_data+0x114/0x1a0 [ 2875.991957] raw_sendmsg+0xaa6/0x29d0 [ 2875.991994] ? dst_output+0x170/0x170 [ 2875.992013] ? __lock_acquire+0x1657/0x5b00 [ 2875.992054] ? perf_trace_lock+0xac/0x490 [ 2875.992072] ? SOFTIRQ_verbose+0x10/0x10 [ 2875.992089] ? create_object.isra.0+0x3ad/0xa20 [ 2875.992112] ? __lockdep_reset_lock+0x180/0x180 [ 2875.992147] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2875.992164] ? find_held_lock+0x2c/0x110 [ 2875.992202] ? trace_hardirqs_on+0x5b/0x180 [ 2875.992226] ? dst_output+0x170/0x170 [ 2875.992248] inet_sendmsg+0x11d/0x140 [ 2875.992267] ? inet_send_prepare+0x540/0x540 [ 2875.992284] __sock_sendmsg+0x13c/0x190 [ 2875.992305] ____sys_sendmsg+0x334/0x870 [ 2875.992329] ? sock_write_iter+0x3d0/0x3d0 [ 2875.992345] ? do_recvmmsg+0x6d0/0x6d0 [ 2875.992365] ? perf_trace_lock+0xac/0x490 [ 2875.992392] ? __lockdep_reset_lock+0x180/0x180 [ 2875.992410] ? perf_trace_lock+0xac/0x490 [ 2875.992437] ___sys_sendmsg+0xf3/0x170 [ 2875.992459] ? sendmsg_copy_msghdr+0x160/0x160 [ 2875.992487] ? lock_downgrade+0x6d0/0x6d0 [ 2875.992517] ? lock_downgrade+0x6d0/0x6d0 [ 2875.992544] ? __fget_files+0x296/0x4c0 [ 2875.992577] ? __fget_light+0xea/0x290 [ 2875.992608] __sys_sendmmsg+0x195/0x470 [ 2875.992635] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2875.992655] ? lock_downgrade+0x6d0/0x6d0 [ 2875.992699] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2875.992724] ? wait_for_completion_io+0x270/0x270 [ 2875.992748] ? rcu_read_lock_any_held+0x75/0xa0 [ 2875.992765] ? vfs_write+0x354/0xa70 [ 2875.992789] ? fput_many+0x2f/0x1a0 [ 2875.992810] ? ksys_write+0x1a9/0x260 [ 2875.992830] ? __ia32_sys_read+0xb0/0xb0 [ 2875.992860] __x64_sys_sendmmsg+0x99/0x100 [ 2875.992879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.992900] do_syscall_64+0x33/0x40 [ 2875.992919] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2875.992933] RIP: 0033:0x7f70f6d55b19 [ 2875.992954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.992965] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2875.992988] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2875.993000] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2875.993012] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2875.993024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2875.993036] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2876.223859] FAT-fs (loop5): bogus number of reserved sectors [ 2876.223875] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2876.252568] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:28:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 10) 14:28:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) 14:28:51 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) 14:28:51 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000017a0000180040000306bc000000c100"/34, @ANYRES32=r1, @ANYBLOB="020000000000696c6530000000000000"]) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)) 14:28:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x4c}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:28:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB]) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000060340)={0x0, 0x0, "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", "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"}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000380)={@initdev, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd1676635ea1945e0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 14:28:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:28:51 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 67) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2892.954359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2892.964521] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2892.970308] FAULT_INJECTION: forcing a failure. [ 2892.970308] name failslab, interval 1, probability 0, space 0, times 0 [ 2892.973205] CPU: 0 PID: 29301 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2892.974925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2892.976924] Call Trace: [ 2892.977566] dump_stack+0x107/0x167 [ 2892.978453] should_fail.cold+0x5/0xa [ 2892.979378] ? __alloc_skb+0x6d/0x5b0 [ 2892.980326] should_failslab+0x5/0x20 [ 2892.981244] kmem_cache_alloc_node+0x55/0x330 [ 2892.982327] __alloc_skb+0x6d/0x5b0 [ 2892.983210] netlink_ack+0x1ed/0xab0 [ 2892.984120] ? perf_trace_lock+0xac/0x490 [ 2892.985113] ? netlink_sendmsg+0xdf0/0xdf0 [ 2892.986130] ? __lockdep_reset_lock+0x180/0x180 [ 2892.987251] netlink_rcv_skb+0x348/0x430 [ 2892.988232] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2892.989209] ? netlink_ack+0xab0/0xab0 [ 2892.990142] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2892.991247] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2892.992354] ? is_vmalloc_addr+0x7b/0xb0 [ 2892.993329] netlink_unicast+0x549/0x7f0 [ 2892.994305] ? netlink_attachskb+0x870/0x870 [ 2892.995348] ? __virt_addr_valid+0x128/0x350 [ 2892.996414] netlink_sendmsg+0x90f/0xdf0 14:28:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x60}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2892.997389] ? netlink_unicast+0x7f0/0x7f0 [ 2892.998517] ? netlink_unicast+0x7f0/0x7f0 [ 2892.999526] __sock_sendmsg+0x154/0x190 [ 2893.000489] ____sys_sendmsg+0x70d/0x870 14:28:51 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 68) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2893.001469] ? sock_write_iter+0x3d0/0x3d0 [ 2893.001490] ? do_recvmmsg+0x6d0/0x6d0 [ 2893.001512] ? perf_trace_lock+0xac/0x490 [ 2893.001543] ? __lockdep_reset_lock+0x180/0x180 [ 2893.001563] ? perf_trace_lock+0xac/0x490 [ 2893.001584] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.001613] ___sys_sendmsg+0xf3/0x170 [ 2893.001639] ? sendmsg_copy_msghdr+0x160/0x160 [ 2893.001670] ? lock_downgrade+0x6d0/0x6d0 [ 2893.001697] ? find_held_lock+0x2c/0x110 [ 2893.001732] ? __fget_files+0x296/0x4c0 14:28:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 11) [ 2893.001769] ? __fget_light+0xea/0x290 [ 2893.001803] __sys_sendmsg+0xe5/0x1b0 [ 2893.001826] ? __sys_sendmsg_sock+0x40/0x40 [ 2893.001848] ? rcu_read_lock_any_held+0x75/0xa0 [ 2893.001895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2893.001918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2893.001937] ? trace_hardirqs_on+0x5b/0x180 [ 2893.001966] do_syscall_64+0x33/0x40 [ 2893.001988] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2893.002003] RIP: 0033:0x7f0d4532db19 14:28:52 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x68}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2893.002026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2893.002039] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2893.002064] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2893.002077] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2893.002091] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 14:28:52 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 69) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2893.002104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2893.002117] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2893.002244] FAULT_INJECTION: forcing a failure. [ 2893.002244] name failslab, interval 1, probability 0, space 0, times 0 [ 2893.002257] CPU: 1 PID: 29305 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2893.002265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2893.002269] Call Trace: [ 2893.002282] dump_stack+0x107/0x167 [ 2893.002298] should_fail.cold+0x5/0xa [ 2893.002310] ? __alloc_skb+0x6d/0x5b0 [ 2893.002325] should_failslab+0x5/0x20 [ 2893.002337] kmem_cache_alloc_node+0x55/0x330 [ 2893.002355] __alloc_skb+0x6d/0x5b0 [ 2893.002376] __ip_append_data+0x2930/0x3310 [ 2893.002402] ? raw_destroy+0x30/0x30 [ 2893.002424] ? ip_finish_output+0x330/0x330 [ 2893.002438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2893.002449] ? ipv4_mtu+0x1ed/0x2c0 [ 2893.002467] ? raw_destroy+0x30/0x30 [ 2893.002479] ip_append_data+0x114/0x1a0 [ 2893.002500] raw_sendmsg+0xaa6/0x29d0 [ 2893.002523] ? dst_output+0x170/0x170 [ 2893.002535] ? __lock_acquire+0x1657/0x5b00 [ 2893.002561] ? perf_trace_lock+0xac/0x490 [ 2893.002572] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.002585] ? create_object.isra.0+0x3ad/0xa20 [ 2893.002599] ? __lockdep_reset_lock+0x180/0x180 [ 2893.002622] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2893.002633] ? find_held_lock+0x2c/0x110 [ 2893.002657] ? trace_hardirqs_on+0x5b/0x180 [ 2893.002672] ? dst_output+0x170/0x170 [ 2893.002687] inet_sendmsg+0x11d/0x140 [ 2893.002699] ? inet_send_prepare+0x540/0x540 [ 2893.002710] __sock_sendmsg+0x13c/0x190 [ 2893.002723] ____sys_sendmsg+0x334/0x870 [ 2893.002738] ? sock_write_iter+0x3d0/0x3d0 [ 2893.002748] ? do_recvmmsg+0x6d0/0x6d0 [ 2893.002761] ? perf_trace_lock+0xac/0x490 [ 2893.002778] ? __lockdep_reset_lock+0x180/0x180 [ 2893.002790] ? perf_trace_lock+0xac/0x490 [ 2893.002807] ___sys_sendmsg+0xf3/0x170 [ 2893.002821] ? sendmsg_copy_msghdr+0x160/0x160 [ 2893.002839] ? lock_downgrade+0x6d0/0x6d0 [ 2893.002858] ? lock_downgrade+0x6d0/0x6d0 [ 2893.002874] ? __fget_files+0x296/0x4c0 [ 2893.002896] ? __fget_light+0xea/0x290 [ 2893.002915] __sys_sendmmsg+0x195/0x470 [ 2893.002933] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2893.002945] ? lock_downgrade+0x6d0/0x6d0 [ 2893.002972] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2893.002989] ? wait_for_completion_io+0x270/0x270 [ 2893.003003] ? rcu_read_lock_any_held+0x75/0xa0 [ 2893.003014] ? vfs_write+0x354/0xa70 [ 2893.003030] ? fput_many+0x2f/0x1a0 [ 2893.003043] ? ksys_write+0x1a9/0x260 [ 2893.003056] ? __ia32_sys_read+0xb0/0xb0 [ 2893.003075] __x64_sys_sendmmsg+0x99/0x100 [ 2893.003087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2893.003100] do_syscall_64+0x33/0x40 [ 2893.003111] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2893.003119] RIP: 0033:0x7f70f6d55b19 [ 2893.003131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2893.003138] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2893.003152] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2893.003159] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2893.003166] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2893.003174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2893.003181] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2893.033999] FAT-fs (loop5): bogus number of reserved sectors [ 2893.034015] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2893.188831] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2893.294437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2893.294765] FAULT_INJECTION: forcing a failure. [ 2893.294765] name failslab, interval 1, probability 0, space 0, times 0 [ 2893.294788] CPU: 0 PID: 29416 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2893.294800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2893.294808] Call Trace: [ 2893.294834] dump_stack+0x107/0x167 [ 2893.294863] should_fail.cold+0x5/0xa [ 2893.294888] ? create_object.isra.0+0x3a/0xa20 [ 2893.294913] should_failslab+0x5/0x20 [ 2893.294935] kmem_cache_alloc+0x5b/0x310 [ 2893.294965] create_object.isra.0+0x3a/0xa20 [ 2893.294988] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2893.295018] kmem_cache_alloc_node+0x169/0x330 [ 2893.295049] __alloc_skb+0x6d/0x5b0 [ 2893.295084] netlink_ack+0x1ed/0xab0 [ 2893.295116] ? perf_trace_lock+0xac/0x490 [ 2893.295137] ? netlink_sendmsg+0xdf0/0xdf0 [ 2893.295162] ? __lockdep_reset_lock+0x180/0x180 [ 2893.295192] netlink_rcv_skb+0x348/0x430 [ 2893.295213] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2893.295237] ? netlink_ack+0xab0/0xab0 [ 2893.295260] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2893.295300] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2893.295322] ? is_vmalloc_addr+0x7b/0xb0 [ 2893.295350] netlink_unicast+0x549/0x7f0 [ 2893.295378] ? netlink_attachskb+0x870/0x870 [ 2893.295398] ? __virt_addr_valid+0x128/0x350 [ 2893.295433] netlink_sendmsg+0x90f/0xdf0 [ 2893.295463] ? netlink_unicast+0x7f0/0x7f0 [ 2893.295499] ? netlink_unicast+0x7f0/0x7f0 [ 2893.295520] __sock_sendmsg+0x154/0x190 [ 2893.295544] ____sys_sendmsg+0x70d/0x870 [ 2893.295570] ? sock_write_iter+0x3d0/0x3d0 [ 2893.295589] ? do_recvmmsg+0x6d0/0x6d0 [ 2893.295610] ? perf_trace_lock+0xac/0x490 [ 2893.295641] ? __lockdep_reset_lock+0x180/0x180 [ 2893.295659] ? perf_trace_lock+0xac/0x490 [ 2893.295680] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.295707] ___sys_sendmsg+0xf3/0x170 [ 2893.295733] ? sendmsg_copy_msghdr+0x160/0x160 [ 2893.295764] ? lock_downgrade+0x6d0/0x6d0 [ 2893.295790] ? find_held_lock+0x2c/0x110 [ 2893.295836] ? __fget_files+0x296/0x4c0 [ 2893.295873] ? __fget_light+0xea/0x290 [ 2893.295912] __sys_sendmsg+0xe5/0x1b0 [ 2893.295935] ? __sys_sendmsg_sock+0x40/0x40 [ 2893.295956] ? rcu_read_lock_any_held+0x75/0xa0 [ 2893.296002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2893.296024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2893.296041] ? trace_hardirqs_on+0x5b/0x180 [ 2893.296070] do_syscall_64+0x33/0x40 [ 2893.296091] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2893.296107] RIP: 0033:0x7f0d4532db19 [ 2893.296130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2893.296144] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2893.296169] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2893.296183] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2893.296199] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2893.296213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2893.296227] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2893.300747] FAULT_INJECTION: forcing a failure. [ 2893.300747] name failslab, interval 1, probability 0, space 0, times 0 [ 2893.300771] CPU: 0 PID: 29417 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2893.300783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2893.300791] Call Trace: [ 2893.300812] dump_stack+0x107/0x167 [ 2893.300840] should_fail.cold+0x5/0xa [ 2893.300878] should_failslab+0x5/0x20 [ 2893.300900] __kmalloc_node_track_caller+0x74/0x3b0 [ 2893.300921] ? __ip_append_data+0x2930/0x3310 [ 2893.300956] __alloc_skb+0xb1/0x5b0 [ 2893.300986] __ip_append_data+0x2930/0x3310 [ 2893.301028] ? raw_destroy+0x30/0x30 [ 2893.301067] ? ip_finish_output+0x330/0x330 [ 2893.301091] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2893.301110] ? ipv4_mtu+0x1ed/0x2c0 [ 2893.301137] ? raw_destroy+0x30/0x30 [ 2893.301159] ip_append_data+0x114/0x1a0 [ 2893.301195] raw_sendmsg+0xaa6/0x29d0 [ 2893.301240] ? dst_output+0x170/0x170 [ 2893.301260] ? __lock_acquire+0x1657/0x5b00 [ 2893.301306] ? perf_trace_lock+0xac/0x490 [ 2893.301327] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.301347] ? create_object.isra.0+0x3ad/0xa20 [ 2893.301373] ? __lockdep_reset_lock+0x180/0x180 [ 2893.301414] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2893.301433] ? find_held_lock+0x2c/0x110 [ 2893.301475] ? trace_hardirqs_on+0x5b/0x180 [ 2893.301504] ? dst_output+0x170/0x170 [ 2893.301529] inet_sendmsg+0x11d/0x140 [ 2893.301550] ? inet_send_prepare+0x540/0x540 [ 2893.301570] __sock_sendmsg+0x13c/0x190 [ 2893.301595] ____sys_sendmsg+0x334/0x870 [ 2893.301627] ? sock_write_iter+0x3d0/0x3d0 [ 2893.301645] ? do_recvmmsg+0x6d0/0x6d0 [ 2893.301668] ? perf_trace_lock+0xac/0x490 [ 2893.301700] ? __lockdep_reset_lock+0x180/0x180 [ 2893.301721] ? perf_trace_lock+0xac/0x490 [ 2893.301751] ___sys_sendmsg+0xf3/0x170 [ 2893.301778] ? sendmsg_copy_msghdr+0x160/0x160 [ 2893.301809] ? lock_downgrade+0x6d0/0x6d0 [ 2893.301844] ? lock_downgrade+0x6d0/0x6d0 [ 2893.301873] ? __fget_files+0x296/0x4c0 [ 2893.301912] ? __fget_light+0xea/0x290 [ 2893.301947] __sys_sendmmsg+0x195/0x470 [ 2893.301978] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2893.302001] ? lock_downgrade+0x6d0/0x6d0 [ 2893.302049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2893.302078] ? wait_for_completion_io+0x270/0x270 [ 2893.302105] ? rcu_read_lock_any_held+0x75/0xa0 [ 2893.302124] ? vfs_write+0x354/0xa70 [ 2893.302153] ? fput_many+0x2f/0x1a0 [ 2893.302177] ? ksys_write+0x1a9/0x260 [ 2893.302200] ? __ia32_sys_read+0xb0/0xb0 [ 2893.302234] __x64_sys_sendmmsg+0x99/0x100 [ 2893.302256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2893.302280] do_syscall_64+0x33/0x40 [ 2893.302301] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2893.302315] RIP: 0033:0x7f70f6d55b19 [ 2893.302338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2893.302350] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2893.302374] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2893.302388] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2893.302401] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2893.302415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2893.302429] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2893.485768] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2893.617408] FAULT_INJECTION: forcing a failure. [ 2893.617408] name failslab, interval 1, probability 0, space 0, times 0 [ 2893.617436] CPU: 0 PID: 29421 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2893.617452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2893.617468] Call Trace: [ 2893.617493] dump_stack+0x107/0x167 [ 2893.617521] should_fail.cold+0x5/0xa [ 2893.617544] ? create_object.isra.0+0x3a/0xa20 [ 2893.617567] should_failslab+0x5/0x20 [ 2893.617587] kmem_cache_alloc+0x5b/0x310 [ 2893.617614] create_object.isra.0+0x3a/0xa20 [ 2893.617635] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2893.617663] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2893.617682] ? __ip_append_data+0x2930/0x3310 [ 2893.617710] __alloc_skb+0xb1/0x5b0 [ 2893.617737] __ip_append_data+0x2930/0x3310 [ 2893.617775] ? raw_destroy+0x30/0x30 [ 2893.617809] ? ip_finish_output+0x330/0x330 [ 2893.617830] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2893.617848] ? ipv4_mtu+0x1ed/0x2c0 [ 2893.617871] ? raw_destroy+0x30/0x30 [ 2893.617891] ip_append_data+0x114/0x1a0 [ 2893.617923] raw_sendmsg+0xaa6/0x29d0 [ 2893.617960] ? dst_output+0x170/0x170 [ 2893.617979] ? __lock_acquire+0x1657/0x5b00 [ 2893.618020] ? perf_trace_lock+0xac/0x490 [ 2893.618038] ? SOFTIRQ_verbose+0x10/0x10 [ 2893.618056] ? create_object.isra.0+0x3ad/0xa20 [ 2893.618079] ? __lockdep_reset_lock+0x180/0x180 [ 2893.618115] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2893.618132] ? find_held_lock+0x2c/0x110 [ 2893.618170] ? trace_hardirqs_on+0x5b/0x180 [ 2893.618194] ? dst_output+0x170/0x170 [ 2893.618217] inet_sendmsg+0x11d/0x140 [ 2893.618236] ? inet_send_prepare+0x540/0x540 [ 2893.618254] __sock_sendmsg+0x13c/0x190 [ 2893.618276] ____sys_sendmsg+0x334/0x870 [ 2893.618299] ? sock_write_iter+0x3d0/0x3d0 [ 2893.618316] ? do_recvmmsg+0x6d0/0x6d0 [ 2893.618335] ? perf_trace_lock+0xac/0x490 [ 2893.618363] ? __lockdep_reset_lock+0x180/0x180 [ 2893.618382] ? perf_trace_lock+0xac/0x490 [ 2893.618408] ___sys_sendmsg+0xf3/0x170 [ 2893.618432] ? sendmsg_copy_msghdr+0x160/0x160 [ 2893.618459] ? lock_downgrade+0x6d0/0x6d0 [ 2893.618489] ? lock_downgrade+0x6d0/0x6d0 [ 2893.618516] ? __fget_files+0x296/0x4c0 [ 2893.618550] ? __fget_light+0xea/0x290 [ 2893.618580] __sys_sendmmsg+0x195/0x470 [ 2893.618608] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2893.618628] ? lock_downgrade+0x6d0/0x6d0 [ 2893.618671] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2893.618702] ? wait_for_completion_io+0x270/0x270 [ 2893.618725] ? rcu_read_lock_any_held+0x75/0xa0 [ 2893.618743] ? vfs_write+0x354/0xa70 [ 2893.618767] ? fput_many+0x2f/0x1a0 [ 2893.618788] ? ksys_write+0x1a9/0x260 [ 2893.618808] ? __ia32_sys_read+0xb0/0xb0 [ 2893.618838] __x64_sys_sendmmsg+0x99/0x100 [ 2893.618857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2893.618878] do_syscall_64+0x33/0x40 [ 2893.618897] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2893.618911] RIP: 0033:0x7f70f6d55b19 [ 2893.618931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2893.618942] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2893.618965] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2893.618976] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2893.618988] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2893.619000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2893.619012] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:29:08 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) 14:29:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 12) 14:29:08 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)) 14:29:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 70) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:29:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:29:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x6c}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:29:08 executing program 1: r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xe) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9010}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={[0xf0]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ftruncate(r1, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)={0x3, 0xc8, "df1f240aa6d76a256f6939908d22746cc12079d379e60801f5e00c6666074dc3411828d543c7c15c4e6654d2a6872f1e042e6d6a89a63959ae4c3fdfe50ffce173d5566ccc80a24c895f6805438ce6860b1243cf4eccd73aed086809d99945f7504d1cde882e3cdb974e340b3f8386475cfca7d4fb1e1b51028a5ed5b3d1fabd7b1646e490385d49873f99d669489a2537fcd928a99da383f0ddbc83ed3179666a69975e03bd1e934d5b74e7088f5a5146d85370c444fdb3ccca51297be75c354954b52f41076d92"}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 14:29:08 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) [ 2909.774983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2909.775068] FAULT_INJECTION: forcing a failure. [ 2909.775068] name failslab, interval 1, probability 0, space 0, times 0 [ 2909.775088] CPU: 0 PID: 29435 Comm: syz-executor.4 Not tainted 5.10.207 #1 14:29:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 13) [ 2909.775099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2909.775106] Call Trace: [ 2909.775130] dump_stack+0x107/0x167 [ 2909.775156] should_fail.cold+0x5/0xa [ 2909.775178] ? create_object.isra.0+0x3a/0xa20 14:29:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x74}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2909.775201] should_failslab+0x5/0x20 [ 2909.775219] kmem_cache_alloc+0x5b/0x310 [ 2909.775246] create_object.isra.0+0x3a/0xa20 [ 2909.775266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2909.775292] kmem_cache_alloc_node+0x169/0x330 14:29:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 71) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2909.775320] __alloc_skb+0x6d/0x5b0 [ 2909.775345] netlink_ack+0x1ed/0xab0 [ 2909.775367] ? perf_trace_lock+0xac/0x490 [ 2909.775386] ? netlink_sendmsg+0xdf0/0xdf0 [ 2909.775408] ? __lockdep_reset_lock+0x180/0x180 [ 2909.775434] netlink_rcv_skb+0x348/0x430 [ 2909.775461] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2909.775481] ? netlink_ack+0xab0/0xab0 [ 2909.775500] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2909.775530] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2909.775549] ? is_vmalloc_addr+0x7b/0xb0 [ 2909.775574] netlink_unicast+0x549/0x7f0 [ 2909.775599] ? netlink_attachskb+0x870/0x870 [ 2909.775617] ? __virt_addr_valid+0x128/0x350 [ 2909.775648] netlink_sendmsg+0x90f/0xdf0 [ 2909.775674] ? netlink_unicast+0x7f0/0x7f0 [ 2909.775706] ? netlink_unicast+0x7f0/0x7f0 [ 2909.775725] __sock_sendmsg+0x154/0x190 [ 2909.775746] ____sys_sendmsg+0x70d/0x870 [ 2909.775769] ? sock_write_iter+0x3d0/0x3d0 [ 2909.775785] ? do_recvmmsg+0x6d0/0x6d0 [ 2909.775804] ? perf_trace_lock+0xac/0x490 [ 2909.775831] ? __lockdep_reset_lock+0x180/0x180 [ 2909.775847] ? perf_trace_lock+0xac/0x490 [ 2909.775865] ? SOFTIRQ_verbose+0x10/0x10 [ 2909.775890] ___sys_sendmsg+0xf3/0x170 [ 2909.775912] ? sendmsg_copy_msghdr+0x160/0x160 [ 2909.775939] ? lock_downgrade+0x6d0/0x6d0 [ 2909.775962] ? find_held_lock+0x2c/0x110 [ 2909.775992] ? __fget_files+0x296/0x4c0 14:29:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) (fail_nth: 14) [ 2909.776052] ? __fget_light+0xea/0x290 [ 2909.776082] __sys_sendmsg+0xe5/0x1b0 [ 2909.776101] ? __sys_sendmsg_sock+0x40/0x40 14:29:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x7a}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2909.776119] ? rcu_read_lock_any_held+0x75/0xa0 [ 2909.776161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2909.776180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2909.776197] ? trace_hardirqs_on+0x5b/0x180 [ 2909.776222] do_syscall_64+0x33/0x40 [ 2909.776240] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2909.776253] RIP: 0033:0x7f0d4532db19 [ 2909.776274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2909.776285] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 14:29:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 72) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2909.776307] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2909.776318] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2909.776330] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2909.776341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2909.776353] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2909.781215] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2909.802348] FAULT_INJECTION: forcing a failure. [ 2909.802348] name failslab, interval 1, probability 0, space 0, times 0 [ 2909.802364] CPU: 1 PID: 29441 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2909.802372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2909.802377] Call Trace: [ 2909.802397] dump_stack+0x107/0x167 [ 2909.802416] should_fail.cold+0x5/0xa [ 2909.802432] ? __alloc_skb+0x6d/0x5b0 [ 2909.802456] should_failslab+0x5/0x20 [ 2909.802470] kmem_cache_alloc_node+0x55/0x330 [ 2909.802488] __alloc_skb+0x6d/0x5b0 [ 2909.802508] __ip_append_data+0x2930/0x3310 [ 2909.802532] ? raw_destroy+0x30/0x30 [ 2909.802554] ? ip_finish_output+0x330/0x330 [ 2909.802568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2909.802580] ? ipv4_mtu+0x1ed/0x2c0 [ 2909.802595] ? raw_destroy+0x30/0x30 [ 2909.802608] ip_append_data+0x114/0x1a0 14:29:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) [ 2909.802628] raw_sendmsg+0xaa6/0x29d0 [ 2909.802652] ? dst_output+0x170/0x170 [ 2909.802666] ? __lock_acquire+0x1657/0x5b00 [ 2909.802692] ? perf_trace_lock+0xac/0x490 [ 2909.802704] ? SOFTIRQ_verbose+0x10/0x10 [ 2909.802717] ? create_object.isra.0+0x3ad/0xa20 [ 2909.802731] ? __lockdep_reset_lock+0x180/0x180 [ 2909.802755] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2909.802766] ? find_held_lock+0x2c/0x110 [ 2909.802791] ? trace_hardirqs_on+0x5b/0x180 [ 2909.802807] ? dst_output+0x170/0x170 [ 2909.802822] inet_sendmsg+0x11d/0x140 [ 2909.802834] ? inet_send_prepare+0x540/0x540 [ 2909.802847] __sock_sendmsg+0x13c/0x190 [ 2909.802860] ____sys_sendmsg+0x334/0x870 [ 2909.802875] ? sock_write_iter+0x3d0/0x3d0 [ 2909.802886] ? do_recvmmsg+0x6d0/0x6d0 [ 2909.802899] ? perf_trace_lock+0xac/0x490 [ 2909.802916] ? __lockdep_reset_lock+0x180/0x180 [ 2909.802928] ? perf_trace_lock+0xac/0x490 [ 2909.802944] ___sys_sendmsg+0xf3/0x170 [ 2909.802959] ? sendmsg_copy_msghdr+0x160/0x160 [ 2909.802976] ? lock_downgrade+0x6d0/0x6d0 [ 2909.802996] ? lock_downgrade+0x6d0/0x6d0 [ 2909.803014] ? __fget_files+0x296/0x4c0 [ 2909.803035] ? __fget_light+0xea/0x290 [ 2909.803054] __sys_sendmmsg+0x195/0x470 [ 2909.803072] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2909.803084] ? lock_downgrade+0x6d0/0x6d0 [ 2909.803113] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2909.803129] ? wait_for_completion_io+0x270/0x270 [ 2909.803145] ? rcu_read_lock_any_held+0x75/0xa0 [ 2909.803157] ? vfs_write+0x354/0xa70 [ 2909.803173] ? fput_many+0x2f/0x1a0 [ 2909.803186] ? ksys_write+0x1a9/0x260 [ 2909.803199] ? __ia32_sys_read+0xb0/0xb0 [ 2909.803218] __x64_sys_sendmmsg+0x99/0x100 [ 2909.803231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2909.803245] do_syscall_64+0x33/0x40 [ 2909.803257] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2909.803267] RIP: 0033:0x7f70f6d55b19 [ 2909.803280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2909.803286] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2909.803301] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2909.803309] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2909.803317] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2909.803324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2909.803332] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2909.824983] FAT-fs (loop5): bogus number of reserved sectors [ 2909.824993] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2909.978840] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2909.979245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2909.979305] FAULT_INJECTION: forcing a failure. [ 2909.979305] name failslab, interval 1, probability 0, space 0, times 0 [ 2909.979317] CPU: 1 PID: 29491 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2909.979325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2909.979328] Call Trace: [ 2909.979345] dump_stack+0x107/0x167 [ 2909.979361] should_fail.cold+0x5/0xa [ 2909.979375] ? create_object.isra.0+0x3a/0xa20 [ 2909.979391] should_failslab+0x5/0x20 [ 2909.979404] kmem_cache_alloc+0x5b/0x310 [ 2909.979424] create_object.isra.0+0x3a/0xa20 [ 2909.979437] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2909.979459] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2909.979470] ? netlink_ack+0x1ed/0xab0 [ 2909.979488] __alloc_skb+0xb1/0x5b0 [ 2909.979504] netlink_ack+0x1ed/0xab0 [ 2909.979523] ? perf_trace_lock+0xac/0x490 [ 2909.979535] ? netlink_sendmsg+0xdf0/0xdf0 [ 2909.979549] ? __lockdep_reset_lock+0x180/0x180 [ 2909.979567] netlink_rcv_skb+0x348/0x430 [ 2909.979579] ? rtnl_fdb_dump+0x9d0/0x9d0 [ 2909.979592] ? netlink_ack+0xab0/0xab0 [ 2909.979605] ? netlink_deliver_tap+0x1ae/0xcd0 [ 2909.979623] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2909.979635] ? is_vmalloc_addr+0x7b/0xb0 [ 2909.979650] netlink_unicast+0x549/0x7f0 [ 2909.979667] ? netlink_attachskb+0x870/0x870 [ 2909.979679] ? __virt_addr_valid+0x128/0x350 [ 2909.979698] netlink_sendmsg+0x90f/0xdf0 [ 2909.979714] ? netlink_unicast+0x7f0/0x7f0 [ 2909.979733] ? netlink_unicast+0x7f0/0x7f0 [ 2909.979746] __sock_sendmsg+0x154/0x190 [ 2909.979759] ____sys_sendmsg+0x70d/0x870 [ 2909.979774] ? sock_write_iter+0x3d0/0x3d0 [ 2909.979784] ? do_recvmmsg+0x6d0/0x6d0 [ 2909.979795] ? perf_trace_lock+0xac/0x490 [ 2909.979810] ? __lockdep_reset_lock+0x180/0x180 [ 2909.979821] ? perf_trace_lock+0xac/0x490 [ 2909.979833] ? SOFTIRQ_verbose+0x10/0x10 [ 2909.979847] ___sys_sendmsg+0xf3/0x170 [ 2909.979861] ? sendmsg_copy_msghdr+0x160/0x160 [ 2909.979878] ? lock_downgrade+0x6d0/0x6d0 [ 2909.979893] ? find_held_lock+0x2c/0x110 [ 2909.979914] ? __fget_files+0x296/0x4c0 [ 2909.979936] ? __fget_light+0xea/0x290 [ 2909.979956] __sys_sendmsg+0xe5/0x1b0 [ 2909.979967] ? __sys_sendmsg_sock+0x40/0x40 [ 2909.979980] ? rcu_read_lock_any_held+0x75/0xa0 [ 2909.980012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2909.980026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2909.980037] ? trace_hardirqs_on+0x5b/0x180 [ 2909.980054] do_syscall_64+0x33/0x40 [ 2909.980066] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2909.980075] RIP: 0033:0x7f0d4532db19 [ 2909.980090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2909.980099] RSP: 002b:00007f0d428a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2909.980113] RAX: ffffffffffffffda RBX: 00007f0d45440f60 RCX: 00007f0d4532db19 [ 2909.980121] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2909.980128] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2909.980137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2909.980145] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2910.005296] FAULT_INJECTION: forcing a failure. [ 2910.005296] name failslab, interval 1, probability 0, space 0, times 0 [ 2910.005310] CPU: 1 PID: 29497 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2910.005317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2910.005321] Call Trace: [ 2910.005333] dump_stack+0x107/0x167 [ 2910.005348] should_fail.cold+0x5/0xa [ 2910.005360] ? create_object.isra.0+0x3a/0xa20 [ 2910.005373] should_failslab+0x5/0x20 [ 2910.005384] kmem_cache_alloc+0x5b/0x310 [ 2910.005402] create_object.isra.0+0x3a/0xa20 [ 2910.005415] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2910.005433] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2910.005459] ? __ip_append_data+0x2930/0x3310 [ 2910.005476] __alloc_skb+0xb1/0x5b0 [ 2910.005493] __ip_append_data+0x2930/0x3310 [ 2910.005518] ? raw_destroy+0x30/0x30 [ 2910.005540] ? ip_finish_output+0x330/0x330 [ 2910.005552] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2910.005562] ? ipv4_mtu+0x1ed/0x2c0 [ 2910.005577] ? raw_destroy+0x30/0x30 [ 2910.005588] ip_append_data+0x114/0x1a0 [ 2910.005608] raw_sendmsg+0xaa6/0x29d0 [ 2910.005632] ? dst_output+0x170/0x170 [ 2910.005643] ? __lock_acquire+0x1657/0x5b00 [ 2910.005668] ? perf_trace_lock+0xac/0x490 [ 2910.005679] ? SOFTIRQ_verbose+0x10/0x10 [ 2910.005690] ? create_object.isra.0+0x3ad/0xa20 [ 2910.005703] ? __lockdep_reset_lock+0x180/0x180 [ 2910.005726] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2910.005735] ? find_held_lock+0x2c/0x110 [ 2910.005757] ? trace_hardirqs_on+0x5b/0x180 [ 2910.005771] ? dst_output+0x170/0x170 [ 2910.005785] inet_sendmsg+0x11d/0x140 [ 2910.005796] ? inet_send_prepare+0x540/0x540 [ 2910.005806] __sock_sendmsg+0x13c/0x190 [ 2910.005818] ____sys_sendmsg+0x334/0x870 [ 2910.005832] ? sock_write_iter+0x3d0/0x3d0 [ 2910.005842] ? do_recvmmsg+0x6d0/0x6d0 [ 2910.005853] ? perf_trace_lock+0xac/0x490 [ 2910.005869] ? __lockdep_reset_lock+0x180/0x180 [ 2910.005879] ? perf_trace_lock+0xac/0x490 [ 2910.005895] ___sys_sendmsg+0xf3/0x170 [ 2910.005908] ? sendmsg_copy_msghdr+0x160/0x160 [ 2910.005923] ? lock_downgrade+0x6d0/0x6d0 [ 2910.005941] ? lock_downgrade+0x6d0/0x6d0 [ 2910.005956] ? __fget_files+0x296/0x4c0 [ 2910.005975] ? __fget_light+0xea/0x290 [ 2910.005992] __sys_sendmmsg+0x195/0x470 [ 2910.006008] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2910.006020] ? lock_downgrade+0x6d0/0x6d0 [ 2910.006044] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2910.006059] ? wait_for_completion_io+0x270/0x270 [ 2910.006072] ? rcu_read_lock_any_held+0x75/0xa0 [ 2910.006082] ? vfs_write+0x354/0xa70 [ 2910.006096] ? fput_many+0x2f/0x1a0 [ 2910.006108] ? ksys_write+0x1a9/0x260 [ 2910.006120] ? __ia32_sys_read+0xb0/0xb0 [ 2910.006137] __x64_sys_sendmmsg+0x99/0x100 [ 2910.006148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2910.006160] do_syscall_64+0x33/0x40 [ 2910.006171] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2910.006178] RIP: 0033:0x7f70f6d55b19 [ 2910.006190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2910.006196] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2910.006209] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2910.006216] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2910.006222] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2910.006229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2910.006236] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2910.187538] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2910.422298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:29:09 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2910.422426] FAULT_INJECTION: forcing a failure. [ 2910.422426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2910.422536] CPU: 0 PID: 29560 Comm: syz-executor.4 Not tainted 5.10.207 #1 [ 2910.422545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2910.422550] Call Trace: [ 2910.422570] dump_stack+0x107/0x167 [ 2910.422591] should_fail.cold+0x5/0xa [ 2910.422612] _copy_to_user+0x2e/0x180 [ 2910.422634] simple_read_from_buffer+0xcc/0x160 [ 2910.422654] proc_fail_nth_read+0x198/0x230 [ 2910.422672] ? proc_sessionid_read+0x230/0x230 [ 2910.422688] ? security_file_permission+0x24e/0x570 [ 2910.422701] ? perf_trace_initcall_start+0x101/0x380 [ 2910.422725] ? proc_sessionid_read+0x230/0x230 [ 2910.422740] vfs_read+0x228/0x580 [ 2910.422761] ksys_read+0x12d/0x260 [ 2910.422776] ? vfs_write+0xa70/0xa70 [ 2910.422796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2910.422811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2910.422831] do_syscall_64+0x33/0x40 [ 2910.422845] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2910.422855] RIP: 0033:0x7f0d452e069c [ 2910.422870] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2910.422879] RSP: 002b:00007f0d428a3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2910.422896] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00007f0d452e069c [ 2910.422906] RDX: 000000000000000f RSI: 00007f0d428a31e0 RDI: 0000000000000004 [ 2910.422915] RBP: 00007f0d428a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2910.422923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2910.422933] R13: 00007ffeeb17701f R14: 00007f0d428a3300 R15: 0000000000022000 [ 2910.551616] FAULT_INJECTION: forcing a failure. [ 2910.551616] name failslab, interval 1, probability 0, space 0, times 0 [ 2910.551634] CPU: 0 PID: 29563 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2910.551642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2910.551647] Call Trace: [ 2910.551667] dump_stack+0x107/0x167 [ 2910.551687] should_fail.cold+0x5/0xa [ 2910.551709] should_failslab+0x5/0x20 [ 2910.551725] __kmalloc_node_track_caller+0x74/0x3b0 [ 2910.551740] ? __ip_append_data+0x2930/0x3310 [ 2910.551761] __alloc_skb+0xb1/0x5b0 [ 2910.551784] __ip_append_data+0x2930/0x3310 [ 2910.551815] ? raw_destroy+0x30/0x30 [ 2910.551841] ? ip_finish_output+0x330/0x330 [ 2910.551856] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2910.551869] ? ipv4_mtu+0x1ed/0x2c0 [ 2910.551887] ? raw_destroy+0x30/0x30 [ 2910.551902] ip_append_data+0x114/0x1a0 [ 2910.551926] raw_sendmsg+0xaa6/0x29d0 [ 2910.551953] ? dst_output+0x170/0x170 [ 2910.551968] ? __lock_acquire+0x1657/0x5b00 [ 2910.551999] ? perf_trace_lock+0xac/0x490 [ 2910.552034] ? SOFTIRQ_verbose+0x10/0x10 [ 2910.552048] ? create_object.isra.0+0x3ad/0xa20 [ 2910.552065] ? __lockdep_reset_lock+0x180/0x180 [ 2910.552092] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2910.552104] ? find_held_lock+0x2c/0x110 [ 2910.552134] ? trace_hardirqs_on+0x5b/0x180 [ 2910.552152] ? dst_output+0x170/0x170 [ 2910.552169] inet_sendmsg+0x11d/0x140 [ 2910.552183] ? inet_send_prepare+0x540/0x540 [ 2910.552200] __sock_sendmsg+0x13c/0x190 [ 2910.552216] ____sys_sendmsg+0x334/0x870 [ 2910.552234] ? sock_write_iter+0x3d0/0x3d0 [ 2910.552246] ? do_recvmmsg+0x6d0/0x6d0 [ 2910.552261] ? perf_trace_lock+0xac/0x490 [ 2910.552282] ? __lockdep_reset_lock+0x180/0x180 [ 2910.552295] ? perf_trace_lock+0xac/0x490 [ 2910.552315] ___sys_sendmsg+0xf3/0x170 [ 2910.552332] ? sendmsg_copy_msghdr+0x160/0x160 [ 2910.552352] ? lock_downgrade+0x6d0/0x6d0 [ 2910.552375] ? lock_downgrade+0x6d0/0x6d0 [ 2910.552395] ? __fget_files+0x296/0x4c0 [ 2910.552420] ? __fget_light+0xea/0x290 [ 2910.552443] __sys_sendmmsg+0x195/0x470 [ 2910.552463] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2910.552478] ? lock_downgrade+0x6d0/0x6d0 [ 2910.552511] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2910.552530] ? wait_for_completion_io+0x270/0x270 [ 2910.552548] ? rcu_read_lock_any_held+0x75/0xa0 [ 2910.552561] ? vfs_write+0x354/0xa70 [ 2910.552579] ? fput_many+0x2f/0x1a0 [ 2910.552595] ? ksys_write+0x1a9/0x260 [ 2910.552610] ? __ia32_sys_read+0xb0/0xb0 [ 2910.552633] __x64_sys_sendmmsg+0x99/0x100 [ 2910.552646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2910.552662] do_syscall_64+0x33/0x40 [ 2910.552676] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2910.552686] RIP: 0033:0x7f70f6d55b19 [ 2910.552701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2910.552710] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2910.552727] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2910.552736] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2910.552745] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2910.552754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2910.552763] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2910.675622] FAT-fs (loop5): bogus number of reserved sectors [ 2910.675639] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2910.687257] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:29:26 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 73) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:29:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)) 14:29:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:29:26 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "bd957fd92f411ce18f895838cbaa4d10431d6f1ff91416ba3d46d46f9806d0d4794ceeeea2a5db653d90fb7d492f9319d402b6e737a65be0d6103a89d9fb0225245ad48f3efc11c748601e2c14070aedcf8790cb988fd9a9dc42560687a7ca8bdb9a4308453cbc1b30fbefed1014e06c663745c9642cd44c9b61cb210a3f9f879c67c210929c75380a32e7910a5057b77e7bd0079d943a44fa0493ff131383c73cac8ae601866e27e490ecdc05fa94e4e033e84ef40df030f991b72629e4b699180c2d59c227c254c29573c7ebe968993b2a808c7a7de46d4a28b88d3878dfcbe3e00ac859a44cc29c887800fd41813956894a5d446ed437c8d0d676163a0fe17faa72d9de2df6acb5bcfc7762dd38fb695d48b7615dd10595f5ce86bdbd42165a492854fd58fa33c189830c186cebc7f476d8f6d340a562e9a0087c1df70c3def99bb7da2e037056bcf01b6b4611021423894cb4fc49280bd814897e99effc5a6f739c7297475fc7ee6abfc739e4245326c052d4a25ff71a919639b9ec609800d000eb7b48a143081004422ab2b0c93f52f13c21fe3a69891899cddf448266e7c6c2a44a6b168b690710fa914cf98d5a4f1d2c69b15bca663d4665dbbcd7b391ad8744d8180fa9b590bf9292e69f810bffe0c7098de8c8c2ffffa7f71487a00ae4e228b96cca3de846df5ec2d175f6ad40f8f75c245cf54f6a110d2feaa211d303b13daf2ce54082d6c41e2bad767a6f7e1508cae12f627037e66993525b05b808098b463f8466860a55a97b40397e48320d933660dab0adefc9f5ee15df7b65671fe0766c1cde6e057dfa4456fb6980349c22672d422ccf7c40a788f7044cdb6c211c40d6ba5210916ba134236af42e3151733dc3f2eb243535643024472bb92205aa7d2258a3d01a597accb32dfde82c3e7455e0f6bea40bc891e1dad5030eecabe51bf31aaeef9b0b5b0e4fe36f6f60c38c2d47f5b45f8e6789650de5a746fe7f918035731eca253c276729b3ae17160a1d97a55cc95fd242c0468cdf19578820e9e0d0d1696bf169104cfc9fff87c7e56bf1fd0109ee2186d09ffb1de9b175ef691fc316cb4e4e37e15cd928f0251188a08e8e2ff4e99e4936ac771717fb3243a13b47166b8bc774651829dbeec86010c1332486690911932921093cf7bc48ee832d7b3cf479257fc9da062964d40a1cf43763af895b7b6cdf5df545036437622a0546880d889f43c6c55c86cad2bff797322df713b16d89d78d1844d098b0c69148bd773f03bc65f6fafed0b67316a172de8778874dd0a21b5a4d76fce773e418a269514d6b94172"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) 14:29:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x2}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:29:26 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "bd957fd92f411ce18f895838cbaa4d10431d6f1ff91416ba3d46d46f9806d0d4794ceeeea2a5db653d90fb7d492f9319d402b6e737a65be0d6103a89d9fb0225245ad48f3efc11c748601e2c14070aedcf8790cb988fd9a9dc42560687a7ca8bdb9a4308453cbc1b30fbefed1014e06c663745c9642cd44c9b61cb210a3f9f879c67c210929c75380a32e7910a5057b77e7bd0079d943a44fa0493ff131383c73cac8ae601866e27e490ecdc05fa94e4e033e84ef40df030f991b72629e4b699180c2d59c227c254c29573c7ebe968993b2a808c7a7de46d4a28b88d3878dfcbe3e00ac859a44cc29c887800fd41813956894a5d446ed437c8d0d676163a0fe17faa72d9de2df6acb5bcfc7762dd38fb695d48b7615dd10595f5ce86bdbd42165a492854fd58fa33c189830c186cebc7f476d8f6d340a562e9a0087c1df70c3def99bb7da2e037056bcf01b6b4611021423894cb4fc49280bd814897e99effc5a6f739c7297475fc7ee6abfc739e4245326c052d4a25ff71a919639b9ec609800d000eb7b48a143081004422ab2b0c93f52f13c21fe3a69891899cddf448266e7c6c2a44a6b168b690710fa914cf98d5a4f1d2c69b15bca663d4665dbbcd7b391ad8744d8180fa9b590bf9292e69f810bffe0c7098de8c8c2ffffa7f71487a00ae4e228b96cca3de846df5ec2d175f6ad40f8f75c245cf54f6a110d2feaa211d303b13daf2ce54082d6c41e2bad767a6f7e1508cae12f627037e66993525b05b808098b463f8466860a55a97b40397e48320d933660dab0adefc9f5ee15df7b65671fe0766c1cde6e057dfa4456fb6980349c22672d422ccf7c40a788f7044cdb6c211c40d6ba5210916ba134236af42e3151733dc3f2eb243535643024472bb92205aa7d2258a3d01a597accb32dfde82c3e7455e0f6bea40bc891e1dad5030eecabe51bf31aaeef9b0b5b0e4fe36f6f60c38c2d47f5b45f8e6789650de5a746fe7f918035731eca253c276729b3ae17160a1d97a55cc95fd242c0468cdf19578820e9e0d0d1696bf169104cfc9fff87c7e56bf1fd0109ee2186d09ffb1de9b175ef691fc316cb4e4e37e15cd928f0251188a08e8e2ff4e99e4936ac771717fb3243a13b47166b8bc774651829dbeec86010c1332486690911932921093cf7bc48ee832d7b3cf479257fc9da062964d40a1cf43763af895b7b6cdf5df545036437622a0546880d889f43c6c55c86cad2bff797322df713b16d89d78d1844d098b0c69148bd773f03bc65f6fafed0b67316a172de8778874dd0a21b5a4d76fce773e418a269514d6b94172"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) 14:29:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:29:26 executing program 1: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/usbmon', 0x54000, 0x1c0) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x80040, 0xff) copy_file_range(r0, &(0x7f0000000000)=0xffffffffffffff80, 0xffffffffffffffff, &(0x7f0000000100)=0x7, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) dup3(r2, r1, 0x0) close(r1) execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='lo\x00') [ 2927.151664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2927.161803] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2927.192001] FAULT_INJECTION: forcing a failure. [ 2927.192001] name failslab, interval 1, probability 0, space 0, times 0 [ 2927.194724] CPU: 0 PID: 29586 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2927.196250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2927.198130] Call Trace: [ 2927.198720] dump_stack+0x107/0x167 [ 2927.199533] should_fail.cold+0x5/0xa [ 2927.200393] should_failslab+0x5/0x20 [ 2927.201242] __kmalloc_node_track_caller+0x74/0x3b0 [ 2927.202345] ? __ip_append_data+0x2930/0x3310 [ 2927.203348] __alloc_skb+0xb1/0x5b0 [ 2927.204163] __ip_append_data+0x2930/0x3310 [ 2927.205147] ? raw_destroy+0x30/0x30 [ 2927.205990] ? ip_finish_output+0x330/0x330 [ 2927.206947] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2927.208080] ? ipv4_mtu+0x1ed/0x2c0 [ 2927.208909] ? raw_destroy+0x30/0x30 [ 2927.209734] ip_append_data+0x114/0x1a0 [ 2927.210624] raw_sendmsg+0xaa6/0x29d0 [ 2927.211483] ? dst_output+0x170/0x170 [ 2927.212539] ? __lock_acquire+0x1657/0x5b00 [ 2927.213682] ? perf_trace_lock+0xac/0x490 [ 2927.214748] ? SOFTIRQ_verbose+0x10/0x10 [ 2927.215794] ? create_object.isra.0+0x3ad/0xa20 [ 2927.217034] ? __lockdep_reset_lock+0x180/0x180 [ 2927.218247] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2927.219609] ? find_held_lock+0x2c/0x110 [ 2927.220691] ? trace_hardirqs_on+0x5b/0x180 [ 2927.221812] ? dst_output+0x170/0x170 [ 2927.222808] inet_sendmsg+0x11d/0x140 [ 2927.223793] ? inet_send_prepare+0x540/0x540 [ 2927.224942] __sock_sendmsg+0x13c/0x190 [ 2927.225971] ____sys_sendmsg+0x334/0x870 [ 2927.227029] ? sock_write_iter+0x3d0/0x3d0 [ 2927.228121] ? do_recvmmsg+0x6d0/0x6d0 [ 2927.229152] ? perf_trace_lock+0xac/0x490 [ 2927.230076] ? __lockdep_reset_lock+0x180/0x180 [ 2927.231087] ? perf_trace_lock+0xac/0x490 [ 2927.231989] ___sys_sendmsg+0xf3/0x170 [ 2927.232844] ? sendmsg_copy_msghdr+0x160/0x160 [ 2927.233836] ? lock_downgrade+0x6d0/0x6d0 [ 2927.234741] ? lock_downgrade+0x6d0/0x6d0 [ 2927.235651] ? __fget_files+0x296/0x4c0 [ 2927.236546] ? __fget_light+0xea/0x290 [ 2927.237405] __sys_sendmmsg+0x195/0x470 [ 2927.238271] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2927.239206] ? lock_downgrade+0x6d0/0x6d0 [ 2927.240128] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2927.241207] ? wait_for_completion_io+0x270/0x270 [ 2927.242274] ? rcu_read_lock_any_held+0x75/0xa0 [ 2927.243298] ? vfs_write+0x354/0xa70 [ 2927.244127] ? fput_many+0x2f/0x1a0 [ 2927.244941] ? ksys_write+0x1a9/0x260 [ 2927.245788] ? __ia32_sys_read+0xb0/0xb0 [ 2927.246690] __x64_sys_sendmmsg+0x99/0x100 [ 2927.247618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2927.248789] do_syscall_64+0x33/0x40 [ 2927.249604] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2927.250731] RIP: 0033:0x7f70f6d55b19 [ 2927.251542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2927.255612] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2927.257268] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2927.258841] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2927.260410] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2927.261985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2927.263535] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:29:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x702, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2927.299307] FAT-fs (loop5): bogus number of reserved sectors [ 2927.299322] FAT-fs (loop5): Can't find a valid FAT filesystem 14:29:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x3}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:29:26 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000040)={&(0x7f0000000100)=""/210, 0xd2, 0x5, 0x5}) [ 2927.437149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:29:26 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 74) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:29:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x703, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2927.623648] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2927.667792] [ 2927.668177] ====================================================== [ 2927.669614] WARNING: possible circular locking dependency detected [ 2927.670900] 5.10.207 #1 Not tainted [ 2927.671657] ------------------------------------------------------ [ 2927.672993] syz-executor.1/29706 is trying to acquire lock: [ 2927.674184] ffff888018550b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2927.676336] [ 2927.676336] but task is already holding lock: [ 2927.677550] ffffffff85619628 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2927.679392] [ 2927.679392] which lock already depends on the new lock. [ 2927.679392] [ 2927.681105] [ 2927.681105] the existing dependency chain (in reverse order) is: [ 2927.685934] [ 2927.685934] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2927.687312] __mutex_lock+0x13d/0x10b0 [ 2927.688216] rfkill_register+0x36/0xa10 [ 2927.689170] hci_register_dev+0x42e/0xc00 [ 2927.690139] __vhci_create_device+0x2c8/0x5c0 [ 2927.691158] vhci_open_timeout+0x38/0x50 [ 2927.692329] process_one_work+0x9a9/0x14b0 [ 2927.693545] worker_thread+0x61d/0x1310 [ 2927.694517] kthread+0x38f/0x470 [ 2927.695331] ret_from_fork+0x22/0x30 [ 2927.696184] [ 2927.696184] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2927.697587] __mutex_lock+0x13d/0x10b0 [ 2927.698486] vhci_send_frame+0x63/0xa0 [ 2927.699398] hci_send_frame+0x1b9/0x320 [ 2927.700332] hci_tx_work+0x10af/0x1660 [ 2927.701238] process_one_work+0x9a9/0x14b0 [ 2927.702223] worker_thread+0x61d/0x1310 [ 2927.703149] kthread+0x38f/0x470 [ 2927.703951] ret_from_fork+0x22/0x30 [ 2927.704827] [ 2927.704827] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2927.706442] __flush_work+0x105/0xa90 [ 2927.707333] hci_dev_do_close+0x131/0x1240 [ 2927.708321] hci_unregister_dev+0x149/0x430 [ 2927.709307] vhci_release+0x70/0xf0 [ 2927.710158] __fput+0x285/0x980 [ 2927.710948] task_work_run+0xe2/0x1a0 [ 2927.711829] do_exit+0xb6f/0x2600 [ 2927.712655] do_group_exit+0x125/0x310 [ 2927.713548] get_signal+0x4bc/0x22e0 [ 2927.714443] arch_do_signal_or_restart+0x2b7/0x1990 [ 2927.715617] exit_to_user_mode_prepare+0x10f/0x190 [ 2927.716809] syscall_exit_to_user_mode+0x38/0x1e0 [ 2927.717907] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2927.719063] [ 2927.719063] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2927.720379] __mutex_lock+0x13d/0x10b0 [ 2927.721290] bg_scan_update+0x82/0x500 [ 2927.722193] process_one_work+0x9a9/0x14b0 [ 2927.723168] worker_thread+0x61d/0x1310 [ 2927.724087] kthread+0x38f/0x470 [ 2927.724900] ret_from_fork+0x22/0x30 [ 2927.725755] [ 2927.725755] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2927.727488] __lock_acquire+0x29e7/0x5b00 [ 2927.728463] lock_acquire+0x197/0x470 [ 2927.729351] __flush_work+0x105/0xa90 [ 2927.730233] __cancel_work_timer+0x368/0x4c0 [ 2927.731254] hci_request_cancel_all+0x73/0x230 [ 2927.732303] hci_dev_do_close+0xd9/0x1240 [ 2927.733260] hci_rfkill_set_block+0x166/0x1a0 [ 2927.734285] rfkill_set_block+0x1fd/0x540 [ 2927.735239] rfkill_fop_write+0x253/0x4b0 [ 2927.736200] vfs_write+0x29a/0xa70 [ 2927.737063] ksys_write+0x1f6/0x260 [ 2927.737934] do_syscall_64+0x33/0x40 [ 2927.738804] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2927.739956] [ 2927.739956] other info that might help us debug this: [ 2927.739956] [ 2927.741613] Chain exists of: [ 2927.741613] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2927.741613] [ 2927.744408] Possible unsafe locking scenario: [ 2927.744408] [ 2927.745641] CPU0 CPU1 [ 2927.746583] ---- ---- [ 2927.747531] lock(rfkill_global_mutex); [ 2927.748419] lock(&data->open_mutex); [ 2927.749748] lock(rfkill_global_mutex); [ 2927.751082] lock((work_completion)(&hdev->bg_scan_update)); [ 2927.752293] [ 2927.752293] *** DEADLOCK *** [ 2927.752293] [ 2927.753549] 1 lock held by syz-executor.1/29706: [ 2927.754520] #0: ffffffff85619628 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2927.756477] [ 2927.756477] stack backtrace: [ 2927.757400] CPU: 1 PID: 29706 Comm: syz-executor.1 Not tainted 5.10.207 #1 [ 2927.758832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2927.760555] Call Trace: [ 2927.761104] dump_stack+0x107/0x167 [ 2927.761865] check_noncircular+0x263/0x2e0 [ 2927.762735] ? register_lock_class+0xbb/0x17b0 [ 2927.763688] ? print_circular_bug+0x470/0x470 [ 2927.764639] ? perf_tp_event+0x5ce/0xc00 [ 2927.765464] ? find_first_zero_bit+0x94/0xb0 [ 2927.766379] ? alloc_chain_hlocks+0x342/0x5a0 [ 2927.767311] __lock_acquire+0x29e7/0x5b00 [ 2927.768209] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2927.769329] ? SOFTIRQ_verbose+0x10/0x10 [ 2927.770183] ? __lockdep_reset_lock+0x180/0x180 [ 2927.771146] ? tracing_generic_entry_update+0x1ed/0x270 [ 2927.772272] lock_acquire+0x197/0x470 [ 2927.773062] ? __flush_work+0xdd/0xa90 [ 2927.773879] ? lock_release+0x680/0x680 [ 2927.774696] ? __flush_work+0x78c/0xa90 [ 2927.775504] ? lock_downgrade+0x6d0/0x6d0 [ 2927.776393] __flush_work+0x105/0xa90 [ 2927.777192] ? __flush_work+0xdd/0xa90 [ 2927.778007] ? lock_chain_count+0x20/0x20 [ 2927.778868] ? queue_delayed_work_on+0xe0/0xe0 [ 2927.779802] ? mark_lock+0xf5/0x2df0 [ 2927.780596] ? mark_lock+0xf5/0x2df0 [ 2927.781377] ? lock_chain_count+0x20/0x20 [ 2927.782245] ? perf_trace_lock+0xac/0x490 [ 2927.783104] ? lock_chain_count+0x20/0x20 [ 2927.783977] ? mark_held_locks+0x9e/0xe0 [ 2927.784850] __cancel_work_timer+0x368/0x4c0 [ 2927.785775] ? cancel_delayed_work+0x20/0x20 [ 2927.786707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2927.787783] ? __cancel_work+0x250/0x2b0 [ 2927.788649] ? trace_hardirqs_on+0x5b/0x180 [ 2927.789733] ? __cancel_work+0x1bb/0x2b0 [ 2927.790584] ? try_to_grab_pending+0xe0/0xe0 [ 2927.791505] hci_request_cancel_all+0x73/0x230 [ 2927.792459] hci_dev_do_close+0xd9/0x1240 [ 2927.793316] ? rfkill_set_block+0x18f/0x540 [ 2927.794385] ? hci_dev_open+0x350/0x350 [ 2927.795433] ? mark_held_locks+0x9e/0xe0 [ 2927.796352] hci_rfkill_set_block+0x166/0x1a0 [ 2927.797302] ? hci_power_off+0x20/0x20 [ 2927.798153] rfkill_set_block+0x1fd/0x540 [ 2927.799024] rfkill_fop_write+0x253/0x4b0 [ 2927.799892] ? rfkill_sync_work+0xa0/0xa0 [ 2927.800784] ? security_file_permission+0x24e/0x570 [ 2927.801823] ? rfkill_sync_work+0xa0/0xa0 [ 2927.802676] vfs_write+0x29a/0xa70 [ 2927.803413] ksys_write+0x1f6/0x260 [ 2927.804167] ? __ia32_sys_read+0xb0/0xb0 [ 2927.805033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2927.806122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2927.807185] do_syscall_64+0x33/0x40 [ 2927.807951] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2927.809029] RIP: 0033:0x7fbe162a9b19 [ 2927.809801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2927.813582] RSP: 002b:00007fbe1381f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2927.815161] RAX: ffffffffffffffda RBX: 00007fbe163bcf60 RCX: 00007fbe162a9b19 [ 2927.816691] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2927.818153] RBP: 00007fbe16303f6d R08: 0000000000000000 R09: 0000000000000000 [ 2927.819620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2927.821101] R13: 00007ffc2c63567f R14: 00007fbe1381f300 R15: 0000000000022000 14:29:26 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x423) creat(&(0x7f0000000000)='.\x00', 0x2e) r1 = open(&(0x7f0000000040)='./file0\x00', 0x28000, 0x44) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x101, 0x1, 0x58, 0xfffffffffffffc00}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r2, 0x0) 14:29:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x4}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) 14:29:26 executing program 2: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) r0 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0xffffffffffffffff, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000480)={0x3, 0x0, @auto=[0x2e, 0x3d, 0x3e, 0x3b, 0x40, 0x34, 0x38, 0x3f, 0x13]}, 0x11, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f00000007c0)='rxrpc\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)="62ca48a05a4c3db77079b7fd8144d0f5ae9d15f15fc3b3050dc70a0d9fd4bf66326370d235d580c5506749290008963aced5b8dddc15b8f8c7c7645fb40a5966c5053c9d305b0ccaede15ebf205887c475b515cd48a6be0d72176dd1cc1dea31d08bfa11501983936584fb9a451fee13742bb9d4a38e21937c", 0x79, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f00000004c0)='ceph\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000680)='wchan\x00', r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000006c0)='syzkaller\x00', &(0x7f0000000700)=@secondary) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) r5 = request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='keyring\x00', r1) keyctl$describe(0x6, r5, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2b, {r4}}, 0x58) [ 2927.858546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2927.863681] FAULT_INJECTION: forcing a failure. [ 2927.863681] name failslab, interval 1, probability 0, space 0, times 0 [ 2927.866049] CPU: 1 PID: 29713 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2927.867470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2927.869303] Call Trace: [ 2927.869852] dump_stack+0x107/0x167 [ 2927.870601] should_fail.cold+0x5/0xa [ 2927.871367] ? __alloc_skb+0x6d/0x5b0 [ 2927.872165] should_failslab+0x5/0x20 [ 2927.872974] kmem_cache_alloc_node+0x55/0x330 [ 2927.873912] __alloc_skb+0x6d/0x5b0 [ 2927.874677] __ip_append_data+0x2930/0x3310 [ 2927.875561] ? raw_destroy+0x30/0x30 [ 2927.876339] ? ip_finish_output+0x330/0x330 [ 2927.877242] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2927.878298] ? ipv4_mtu+0x1ed/0x2c0 [ 2927.879046] ? raw_destroy+0x30/0x30 [ 2927.879809] ip_append_data+0x114/0x1a0 [ 2927.880669] raw_sendmsg+0xaa6/0x29d0 [ 2927.881446] ? dst_output+0x170/0x170 [ 2927.882223] ? kasan_save_stack+0x32/0x40 [ 2927.883072] ? kasan_save_stack+0x1b/0x40 [ 2927.883923] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2927.884973] ? ____sys_sendmsg+0x665/0x870 [ 2927.885856] ? perf_trace_lock+0xac/0x490 [ 2927.886703] ? SOFTIRQ_verbose+0x10/0x10 [ 2927.887524] ? __lockdep_reset_lock+0x180/0x180 [ 2927.888507] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2927.889570] ? lock_release+0x4d1/0x680 [ 2927.890384] ? trace_hardirqs_on+0x5b/0x180 [ 2927.891276] ? dst_output+0x170/0x170 [ 2927.892060] inet_sendmsg+0x11d/0x140 [ 2927.892861] ? inet_send_prepare+0x540/0x540 [ 2927.893859] __sock_sendmsg+0x13c/0x190 [ 2927.894685] ____sys_sendmsg+0x334/0x870 [ 2927.895514] ? sock_write_iter+0x3d0/0x3d0 [ 2927.896524] ? do_recvmmsg+0x6d0/0x6d0 [ 2927.897535] ? perf_trace_lock+0xac/0x490 [ 2927.898524] ? __lockdep_reset_lock+0x180/0x180 [ 2927.899496] ? perf_trace_lock+0xac/0x490 [ 2927.900376] ___sys_sendmsg+0xf3/0x170 [ 2927.901189] ? sendmsg_copy_msghdr+0x160/0x160 [ 2927.902123] ? lock_release+0x4d1/0x680 [ 2927.902956] ? lock_downgrade+0x6d0/0x6d0 [ 2927.903809] ? perf_trace_lock_acquire+0xbc/0x590 [ 2927.904805] ? __might_fault+0xd3/0x180 [ 2927.905629] ? lock_downgrade+0x6d0/0x6d0 [ 2927.906472] ? __fget_files+0x296/0x4c0 [ 2927.907300] ? __fget_light+0xea/0x290 [ 2927.908107] __sys_sendmmsg+0x195/0x470 [ 2927.908958] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2927.909845] ? lock_downgrade+0x6d0/0x6d0 [ 2927.910708] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2927.911714] ? wait_for_completion_io+0x270/0x270 [ 2927.912727] ? vfs_write+0x354/0xa70 [ 2927.913484] ? fput_many+0x2f/0x1a0 [ 2927.914239] ? ksys_write+0x1a9/0x260 [ 2927.915041] ? __ia32_sys_read+0xb0/0xb0 [ 2927.915899] __x64_sys_sendmmsg+0x99/0x100 [ 2927.916780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2927.917844] do_syscall_64+0x33/0x40 [ 2927.918618] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2927.919714] RIP: 0033:0x7f70f6d55b19 [ 2927.920498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2927.924263] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2927.925821] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2927.927278] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2927.928756] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2927.930205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2927.931670] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 14:29:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x704, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) 14:29:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) truncate(&(0x7f0000000180)='./file1\x00', 0x3) 14:29:26 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 75) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 14:29:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x0, 0x0, 0xf}}) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4}, 0x6}, {{&(0x7f0000000580)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/226, 0xe2}], 0x4, &(0x7f0000003f00)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x40000006, &(0x7f0000001840)) [ 2928.071663] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 14:29:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x5}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2928.147779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:29:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x705, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x20, 0xa39, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 2928.204317] FAT-fs (loop5): bogus number of reserved sectors [ 2928.204351] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2928.233328] FAULT_INJECTION: forcing a failure. [ 2928.233328] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.233350] CPU: 1 PID: 29832 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2928.233362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 14:29:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000100)={0x0, {{0x3, 0x0, @multicast2}}, {{0x2, 0x4e20, @private}}}, 0x108) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x5}, 0x0, 0x6, [@dev={0xac, 0x14, 0x14, 0x25}, @empty, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010102]}, 0x28) [ 2928.233368] Call Trace: [ 2928.233396] dump_stack+0x107/0x167 [ 2928.233421] should_fail.cold+0x5/0xa [ 2928.233441] ? create_object.isra.0+0x3a/0xa20 [ 2928.233462] should_failslab+0x5/0x20 [ 2928.233481] kmem_cache_alloc+0x5b/0x310 [ 2928.233503] create_object.isra.0+0x3a/0xa20 [ 2928.233524] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.233554] kmem_cache_alloc_node+0x169/0x330 [ 2928.233583] __alloc_skb+0x6d/0x5b0 [ 2928.233606] __ip_append_data+0x2930/0x3310 [ 2928.233634] ? raw_destroy+0x30/0x30 [ 2928.233660] ? ip_finish_output+0x330/0x330 [ 2928.233680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 14:29:27 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) (fail_nth: 76) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2928.233696] ? ipv4_mtu+0x1ed/0x2c0 [ 2928.233716] ? raw_destroy+0x30/0x30 [ 2928.233734] ip_append_data+0x114/0x1a0 [ 2928.233758] raw_sendmsg+0xaa6/0x29d0 [ 2928.233784] ? dst_output+0x170/0x170 [ 2928.233805] ? kasan_save_stack+0x32/0x40 [ 2928.233824] ? kasan_save_stack+0x1b/0x40 [ 2928.233843] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.233860] ? ____sys_sendmsg+0x665/0x870 [ 2928.233885] ? perf_trace_lock+0xac/0x490 [ 2928.233903] ? SOFTIRQ_verbose+0x10/0x10 [ 2928.233924] ? __lockdep_reset_lock+0x180/0x180 [ 2928.233953] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2928.233974] ? lock_release+0x4d1/0x680 [ 2928.233997] ? trace_hardirqs_on+0x5b/0x180 [ 2928.234017] ? dst_output+0x170/0x170 [ 2928.234036] inet_sendmsg+0x11d/0x140 [ 2928.234053] ? inet_send_prepare+0x540/0x540 [ 2928.234070] __sock_sendmsg+0x13c/0x190 [ 2928.234088] ____sys_sendmsg+0x334/0x870 14:29:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x6}}, {@in, 0x0, 0x32}, @in6=@mcast2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}}, 0x0) [ 2928.234108] ? sock_write_iter+0x3d0/0x3d0 [ 2928.234125] ? do_recvmmsg+0x6d0/0x6d0 [ 2928.234142] ? perf_trace_lock+0xac/0x490 [ 2928.234165] ? __lockdep_reset_lock+0x180/0x180 [ 2928.234183] ? perf_trace_lock+0xac/0x490 [ 2928.234204] ___sys_sendmsg+0xf3/0x170 [ 2928.234225] ? sendmsg_copy_msghdr+0x160/0x160 [ 2928.234244] ? lock_release+0x4d1/0x680 [ 2928.234264] ? lock_downgrade+0x6d0/0x6d0 [ 2928.234285] ? perf_trace_lock_acquire+0xbc/0x590 [ 2928.234302] ? __might_fault+0xd3/0x180 [ 2928.234320] ? lock_downgrade+0x6d0/0x6d0 [ 2928.234342] ? __fget_files+0x296/0x4c0 [ 2928.234366] ? __fget_light+0xea/0x290 [ 2928.234390] __sys_sendmmsg+0x195/0x470 [ 2928.234412] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2928.234432] ? lock_downgrade+0x6d0/0x6d0 [ 2928.234463] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2928.234485] ? wait_for_completion_io+0x270/0x270 [ 2928.234505] ? vfs_write+0x354/0xa70 [ 2928.234526] ? fput_many+0x2f/0x1a0 [ 2928.234552] ? ksys_write+0x1a9/0x260 [ 2928.234578] ? __ia32_sys_read+0xb0/0xb0 [ 2928.234611] __x64_sys_sendmmsg+0x99/0x100 [ 2928.234634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2928.234654] do_syscall_64+0x33/0x40 [ 2928.234671] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2928.234684] RIP: 0033:0x7f70f6d55b19 [ 2928.234704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2928.234714] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2928.234735] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2928.234746] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2928.234757] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2928.234768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2928.234780] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 [ 2928.329301] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2928.429940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:29:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000004a00110000000000000000000a00000f"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x44, r5, 0x8, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv0\x00'}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x73}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40801) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 2928.586061] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2928.625441] FAULT_INJECTION: forcing a failure. [ 2928.625441] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.629015] CPU: 1 PID: 29947 Comm: syz-executor.0 Not tainted 5.10.207 #1 [ 2928.630915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2928.633113] Call Trace: [ 2928.633812] dump_stack+0x107/0x167 [ 2928.634778] should_fail.cold+0x5/0xa [ 2928.636103] should_failslab+0x5/0x20 [ 2928.637153] __kmalloc_node_track_caller+0x74/0x3b0 [ 2928.638459] ? __ip_append_data+0x2930/0x3310 [ 2928.639643] __alloc_skb+0xb1/0x5b0 [ 2928.640617] __ip_append_data+0x2930/0x3310 [ 2928.641761] ? raw_destroy+0x30/0x30 [ 2928.642761] ? ip_finish_output+0x330/0x330 [ 2928.643980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.645310] ? ipv4_mtu+0x1ed/0x2c0 [ 2928.646197] ? raw_destroy+0x30/0x30 [ 2928.647093] ip_append_data+0x114/0x1a0 [ 2928.648109] raw_sendmsg+0xaa6/0x29d0 [ 2928.648985] ? dst_output+0x170/0x170 [ 2928.649842] ? kasan_save_stack+0x32/0x40 [ 2928.650772] ? kasan_save_stack+0x1b/0x40 [ 2928.651807] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.653143] ? ____sys_sendmsg+0x665/0x870 [ 2928.654097] ? perf_trace_lock+0xac/0x490 [ 2928.655007] ? SOFTIRQ_verbose+0x10/0x10 [ 2928.655902] ? __lockdep_reset_lock+0x180/0x180 [ 2928.657041] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2928.658371] ? lock_release+0x4d1/0x680 [ 2928.659249] ? trace_hardirqs_on+0x5b/0x180 [ 2928.660197] ? dst_output+0x170/0x170 [ 2928.661055] inet_sendmsg+0x11d/0x140 [ 2928.661900] ? inet_send_prepare+0x540/0x540 [ 2928.662870] __sock_sendmsg+0x13c/0x190 [ 2928.663750] ____sys_sendmsg+0x334/0x870 [ 2928.664773] ? sock_write_iter+0x3d0/0x3d0 [ 2928.665879] ? do_recvmmsg+0x6d0/0x6d0 [ 2928.666740] ? perf_trace_lock+0xac/0x490 [ 2928.667659] ? __lockdep_reset_lock+0x180/0x180 [ 2928.668730] ? perf_trace_lock+0xac/0x490 [ 2928.669778] ___sys_sendmsg+0xf3/0x170 [ 2928.670788] ? sendmsg_copy_msghdr+0x160/0x160 [ 2928.671882] ? lock_release+0x4d1/0x680 [ 2928.672785] ? lock_downgrade+0x6d0/0x6d0 [ 2928.673710] ? perf_trace_lock_acquire+0xbc/0x590 [ 2928.674784] ? __might_fault+0xd3/0x180 [ 2928.675766] ? lock_downgrade+0x6d0/0x6d0 [ 2928.676869] ? __fget_files+0x296/0x4c0 [ 2928.677773] ? __fget_light+0xea/0x290 [ 2928.678657] __sys_sendmmsg+0x195/0x470 [ 2928.679559] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2928.680608] ? lock_downgrade+0x6d0/0x6d0 [ 2928.681671] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2928.682798] ? wait_for_completion_io+0x270/0x270 [ 2928.683897] ? vfs_write+0x354/0xa70 [ 2928.684763] ? fput_many+0x2f/0x1a0 [ 2928.685597] ? ksys_write+0x1a9/0x260 [ 2928.686594] ? __ia32_sys_read+0xb0/0xb0 [ 2928.687711] __x64_sys_sendmmsg+0x99/0x100 [ 2928.688697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2928.689870] do_syscall_64+0x33/0x40 [ 2928.690729] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2928.691995] RIP: 0033:0x7f70f6d55b19 [ 2928.693011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2928.697255] RSP: 002b:00007f70f42cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2928.699296] RAX: ffffffffffffffda RBX: 00007f70f6e68f60 RCX: 00007f70f6d55b19 [ 2928.700960] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000004 [ 2928.702612] RBP: 00007f70f42cb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2928.704278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2928.706164] R13: 00007ffe6f26abdf R14: 00007f70f42cb300 R15: 0000000000022000 VM DIAGNOSIS: 20:59:18 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff8163ef9c RDX=ffff888055fa3480 RSI=ffffffff8163ecde RDI=ffffea000111d100 RBP=ffffea000111d100 RSP=ffff88804262f750 R8 =0000000000000001 R9 =ffffea000111d133 R10=0000000000000000 R11=0000000000000001 R12=ffffea000111d108 R13=ffff88803a3aa7f8 R14=dffffc0000000000 R15=00007f4411b00000 RIP=ffffffff816d8eeb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe2200000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561c786ebcc0 CR3=0000000045ce4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=00000000000d0602 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822cb781 RDI=ffffffff879e8240 RBP=ffffffff879e8200 RSP=ffff888053daf1c8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000072 R13=0000000000000072 R14=ffffffff879e8200 R15=dffffc0000000000 RIP=ffffffff822cb7d8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbe1381f700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f70f7da23a4 CR3=0000000053be4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000