e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2281.396311] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2281.400868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2281.430238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2281.484638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13672 comm=syz-executor.2 [ 2281.505730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:48:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003fffffdfd00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:48:38 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x7a00, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2281.643362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2281.650184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2281.652001] loop1: detected capacity change from 0 to 1536 [ 2281.662982] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2296.043875] loop1: detected capacity change from 0 to 1536 [ 2296.047721] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2296.060119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13696 comm=syz-executor.2 [ 2296.063802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:48:52 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x900, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:48:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:48:52 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r4, 0x0, 0x80, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:48:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xae03, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:48:52 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 21) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:48:52 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:48:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003fffffffe00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:48:52 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:48:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003effdffff00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2296.090495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2296.116314] FAULT_INJECTION: forcing a failure. [ 2296.116314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2296.119235] CPU: 0 PID: 13698 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2296.120769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.122583] Call Trace: [ 2296.123162] dump_stack+0x107/0x167 [ 2296.123963] should_fail.cold+0x5/0xa [ 2296.124815] _copy_from_user+0x2e/0x1b0 [ 2296.125691] __copy_msghdr_from_user+0x91/0x4b0 [ 2296.126713] ? __ia32_sys_shutdown+0x80/0x80 [ 2296.127686] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2296.128829] ? lock_downgrade+0x6d0/0x6d0 [ 2296.129729] sendmsg_copy_msghdr+0xa1/0x160 [ 2296.130661] ? do_recvmmsg+0x6d0/0x6d0 [ 2296.131507] ? find_held_lock+0x2c/0x110 [ 2296.132393] ? finish_task_switch+0x126/0x5d0 [ 2296.133373] ___sys_sendmsg+0xc6/0x170 [ 2296.134218] ? sendmsg_copy_msghdr+0x160/0x160 00:48:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xc00e, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2296.135213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2296.136506] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2296.137487] ? trace_hardirqs_on+0x5b/0x180 [ 2296.138419] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2296.139380] ? finish_task_switch+0x126/0x5d0 [ 2296.140344] ? finish_task_switch+0xef/0x5d0 [ 2296.141298] ? __switch_to+0x572/0xf70 [ 2296.142134] ? __switch_to_asm+0x3a/0x60 [ 2296.143006] ? __switch_to_asm+0x34/0x60 [ 2296.143893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2296.145034] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2296.146197] ? trace_hardirqs_on+0x5b/0x180 [ 2296.147131] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2296.148385] ? __sys_sendmmsg+0x249/0x470 [ 2296.149398] __sys_sendmmsg+0x195/0x470 [ 2296.150366] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2296.150763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2296.151408] ? lock_downgrade+0x6d0/0x6d0 [ 2296.151447] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2296.154601] ? vfs_write+0x7f8/0xb10 [ 2296.155501] ? wait_for_completion_io+0x270/0x270 [ 2296.156670] ? rcu_read_lock_any_held+0x75/0xa0 [ 2296.157802] ? vfs_write+0x354/0xb10 [ 2296.158193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2296.158700] ? fput_many+0x2f/0x1a0 [ 2296.158719] ? ksys_write+0x1a9/0x260 [ 2296.158741] ? __ia32_sys_read+0xb0/0xb0 [ 2296.158768] __x64_sys_sendmmsg+0x99/0x100 [ 2296.163476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2296.164728] do_syscall_64+0x33/0x40 [ 2296.165625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.166856] RIP: 0033:0x7fb085b27b19 [ 2296.167755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.172161] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2296.174008] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2296.175733] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2296.177455] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.179152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2296.180863] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:48:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2296.198695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2296.205519] loop1: detected capacity change from 0 to 1536 [ 2296.217706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2296.226206] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2296.231287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:48:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:48:53 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0xcd15260, 0x8, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="140000000000000029000000080000000000000001010000"], 0x18}}, {{&(0x7f0000000380)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}], 0x2, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000001c0), 0x4, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:48:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2296.276347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13721 comm=syz-executor.2 [ 2296.283254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2296.286449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:48:53 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:48:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003fcfdffff00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2296.346265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2296.393432] loop1: detected capacity change from 0 to 1536 [ 2296.433331] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:49:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="404cc3501b5d9ef0247cf5b29a7a34cc094c", 0x12}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) recvfrom$inet6(r0, &(0x7f0000000540)=""/125, 0x7d, 0x82, &(0x7f00000005c0)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote}) r2 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x7, 0x3, &(0x7f0000000340)=[{&(0x7f00000001c0)="b3be03dbd5e0c62af36b7d693f0280e2ade7b04d9d9b5719bfe9b4bafa0ae5b4aa9cd2df793ca291eeb16b7eca70b4db3d58b23eb7cb8af710d029fbd06ce14ea50ee9621dfc35068e1ac96e4b3d", 0x4e, 0x100}, {&(0x7f0000000740)="010000000fda585d7199c48898c18e59bea23442b15e903c24f3e2ca4d09e3e2336bd6920b4f1a0fa5710a42f3985428f61dfc1b2614e830662bc6b7fa69735a05e0a2f1acf396fd05242c5e0716a803aa5c70bdfa0c24c0aca9c99592748f2303dcda913c274870b5be385b478db9d53978eb157b7994bc65db3d599cb52d3713d30a76b8ca848eaa9dba8ebe847678c8acb0ca8bb18cd0808e3b2dad6db33b0a737bf6c228dea38f679718481863aafe5eee", 0xb3}, {&(0x7f0000000300)="02c49cd9e9255901960a51decb43bdbb7bc72001427fb5d0a8c09520e4ebdc393415f438a80b16b802db208503740ed411515b1500", 0x35, 0x3f}], 0x21140a, &(0x7f0000000a40)={[{'\x00'}, {'\x00'}, {}, {'\x0f\x17\xb6[\x99\x11\xb22\xf1\x93\xa7n\xad=\xf0\x83}m\xd48\xeb\xa7R\f\xf9\x9a\x11\x11ZjGu[\xb4$\xfc;\x89M\x91\x03\xff\x15C\xa6\xfc\x1b\xde\xe5\x8c\xe4t\x136\t\xb3!\x04\x01\xb9\x888\xce3\n\x91\x0f\xbd\xc6\xcc\xa0w\x1d\xaeN\x00\x00\xd8\xdcs\x8fS]\xf98\x05~\xcaG1\xc3.%\xb4\xe6,\xee\xdb\xc6sV~\x1dq}\xde\x95\xe4\v\xa7\xfc\x7fN$9t|9\'.\v\xb3p%\x9f\x81\xf6\x01\x12%|=\xddny\xb8\xdd\xf4t`'}, {'\x00\xe4\x16\x0e\xe0\xeb*\xcd\xec\xccq\xec\xbc-\xd6\xf8s\xa8X\xc1\xee\xc1(\xbf~3\x86\x0e\x01\x1eb\xc3]7^o\xa3\xaeX|*t\xe9N\x7f<\xf0\xed\b\x92\xc6A\xb89\xca\xcdS\x10\"'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, ')'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) 00:49:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x80000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2309.784360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13743 comm=syz-executor.2 00:49:06 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 22) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:49:06 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa00, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:49:06 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r4, 0x0, 0x80, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:49:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2309.801762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2309.803699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:49:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003fdfdffff00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:49:06 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2309.809025] FAULT_INJECTION: forcing a failure. [ 2309.809025] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.810514] CPU: 0 PID: 13747 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2309.811420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.812483] Call Trace: [ 2309.812835] dump_stack+0x107/0x167 [ 2309.813337] should_fail.cold+0x5/0xa [ 2309.813837] ? __alloc_skb+0x6d/0x5b0 [ 2309.814334] should_failslab+0x5/0x20 [ 2309.814832] kmem_cache_alloc_node+0x55/0x330 [ 2309.815422] __alloc_skb+0x6d/0x5b0 [ 2309.815901] alloc_skb_with_frags+0x92/0x570 [ 2309.816470] sock_alloc_send_pskb+0x7af/0x930 [ 2309.817078] ? sk_alloc+0x350/0x350 [ 2309.817557] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2309.818237] ? lock_chain_count+0x20/0x20 [ 2309.818764] ? lock_chain_count+0x20/0x20 [ 2309.819306] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2309.819962] ? ip_frag_init+0x350/0x350 [ 2309.820481] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2309.821130] ? ip6_mtu+0x1e9/0x3d0 [ 2309.821599] ? ip6_setup_cork+0xfb7/0x1740 [ 2309.822142] ip6_make_skb+0x2df/0x4e0 [ 2309.822636] ? ip_frag_init+0x350/0x350 [ 2309.823145] ? ip_frag_init+0x350/0x350 [ 2309.823664] ? ip6_push_pending_frames+0xf0/0xf0 [ 2309.824284] ? ip6_dst_hoplimit+0x199/0x440 [ 2309.824844] ? lock_downgrade+0x6d0/0x6d0 [ 2309.825416] udpv6_sendmsg+0x2128/0x2b40 [ 2309.825950] ? ip_frag_init+0x350/0x350 [ 2309.826471] ? udp_v6_push_pending_frames+0x360/0x360 [ 2309.827141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.827819] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2309.828511] ? lock_acquire+0x197/0x470 [ 2309.829045] ? find_held_lock+0x2c/0x110 [ 2309.829083] loop1: detected capacity change from 0 to 1536 [ 2309.829580] ? sock_has_perm+0x1ea/0x280 [ 2309.829605] ? __import_iovec+0x458/0x590 [ 2309.831925] ? udp_v6_push_pending_frames+0x360/0x360 [ 2309.832593] inet6_sendmsg+0x105/0x140 [ 2309.833146] ? inet6_compat_ioctl+0x320/0x320 [ 2309.833729] __sock_sendmsg+0xf2/0x190 [ 2309.834240] ____sys_sendmsg+0x334/0x870 [ 2309.834761] ? sock_write_iter+0x3d0/0x3d0 [ 2309.835307] ? do_recvmmsg+0x6d0/0x6d0 [ 2309.835816] ? __lock_acquire+0x1657/0x5b00 [ 2309.836383] ___sys_sendmsg+0xf3/0x170 [ 2309.836904] ? sendmsg_copy_msghdr+0x160/0x160 [ 2309.837511] ? __fget_files+0x2cf/0x520 [ 2309.838029] ? lock_acquire+0x197/0x470 [ 2309.838543] ? find_held_lock+0x2c/0x110 [ 2309.839070] ? __might_fault+0xd3/0x180 [ 2309.839588] ? lock_downgrade+0x6d0/0x6d0 [ 2309.840131] __sys_sendmmsg+0x195/0x470 [ 2309.840645] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2309.841220] ? lock_downgrade+0x6d0/0x6d0 [ 2309.841768] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2309.842394] ? wait_for_completion_io+0x270/0x270 [ 2309.843024] ? rcu_read_lock_any_held+0x75/0xa0 [ 2309.843626] ? vfs_write+0x354/0xb10 [ 2309.844108] ? fput_many+0x2f/0x1a0 [ 2309.844574] ? ksys_write+0x1a9/0x260 [ 2309.845090] ? __ia32_sys_read+0xb0/0xb0 [ 2309.845619] __x64_sys_sendmmsg+0x99/0x100 [ 2309.846169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.846832] do_syscall_64+0x33/0x40 [ 2309.847312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2309.847974] RIP: 0033:0x7fb085b27b19 [ 2309.848454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.850469] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2309.850843] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2309.850856] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2309.850863] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2309.850870] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2309.850885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2309.857394] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:49:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000038cffffff00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2309.889998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:49:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2309.925239] loop1: detected capacity change from 0 to 1536 00:49:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2309.960243] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2309.966572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2309.973388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2309.975969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13774 comm=syz-executor.2 00:49:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003f6ffffff00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2310.020447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:49:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:49:07 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 23) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:49:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2310.082339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:49:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003feffffff00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2310.089750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2310.115627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13782 comm=syz-executor.2 [ 2310.126684] loop1: detected capacity change from 0 to 1536 [ 2310.140782] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2310.144173] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.189989] FAULT_INJECTION: forcing a failure. [ 2310.189989] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.191379] CPU: 0 PID: 13787 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2310.192189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2310.193153] Call Trace: [ 2310.193465] dump_stack+0x107/0x167 [ 2310.193890] should_fail.cold+0x5/0xa [ 2310.194340] ? create_object.isra.0+0x3a/0xa30 [ 2310.194873] should_failslab+0x5/0x20 [ 2310.195318] kmem_cache_alloc+0x5b/0x310 [ 2310.195794] ? __is_insn_slot_addr+0x14c/0x290 [ 2310.196333] create_object.isra.0+0x3a/0xa30 [ 2310.196837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2310.197454] kmem_cache_alloc_node+0x169/0x330 [ 2310.197988] __alloc_skb+0x6d/0x5b0 [ 2310.198413] alloc_skb_with_frags+0x92/0x570 [ 2310.198931] sock_alloc_send_pskb+0x7af/0x930 [ 2310.199460] ? sk_alloc+0x350/0x350 [ 2310.199888] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2310.200525] ? __ip6_append_data.isra.0+0x719/0x3b90 [ 2310.201143] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2310.201735] ? ip_frag_init+0x350/0x350 [ 2310.202206] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2310.202770] ? ip6_mtu+0x1e9/0x3d0 [ 2310.203184] ? ip6_setup_cork+0xfb7/0x1740 [ 2310.203668] ip6_make_skb+0x2df/0x4e0 [ 2310.204108] ? ip_frag_init+0x350/0x350 [ 2310.204574] ? ip_frag_init+0x350/0x350 [ 2310.205067] ? ip6_push_pending_frames+0xf0/0xf0 [ 2310.205622] ? ip6_dst_hoplimit+0x199/0x440 [ 2310.206130] ? lock_downgrade+0x6d0/0x6d0 [ 2310.206619] udpv6_sendmsg+0x2128/0x2b40 [ 2310.207099] ? ip_frag_init+0x350/0x350 [ 2310.207569] ? udp_v6_push_pending_frames+0x360/0x360 [ 2310.208171] ? perf_event_task_disable+0x390/0x390 [ 2310.208743] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2310.209330] ? lock_acquire+0x197/0x470 [ 2310.209790] ? find_held_lock+0x2c/0x110 [ 2310.210263] ? sock_has_perm+0x1ea/0x280 [ 2310.210748] ? udp_v6_push_pending_frames+0x360/0x360 [ 2310.211351] inet6_sendmsg+0x105/0x140 [ 2310.211801] ? inet6_compat_ioctl+0x320/0x320 [ 2310.212315] __sock_sendmsg+0xf2/0x190 [ 2310.212770] ____sys_sendmsg+0x334/0x870 [ 2310.213266] ? sock_write_iter+0x3d0/0x3d0 [ 2310.213755] ? do_recvmmsg+0x6d0/0x6d0 [ 2310.214209] ? find_held_lock+0x2c/0x110 [ 2310.214685] ___sys_sendmsg+0xf3/0x170 [ 2310.215137] ? sendmsg_copy_msghdr+0x160/0x160 [ 2310.215660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2310.216271] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2310.216780] ? trace_hardirqs_on+0x5b/0x180 [ 2310.217293] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2310.217820] ? finish_task_switch+0x126/0x5d0 [ 2310.218342] ? finish_task_switch+0xef/0x5d0 [ 2310.218851] ? __switch_to+0x572/0xf70 [ 2310.219304] ? __switch_to_asm+0x3a/0x60 [ 2310.219770] ? __switch_to_asm+0x34/0x60 [ 2310.220241] ? __schedule+0x82c/0x1ea0 [ 2310.220696] ? io_schedule_timeout+0x140/0x140 [ 2310.221252] __sys_sendmmsg+0x195/0x470 [ 2310.221716] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2310.222209] ? lock_downgrade+0x6d0/0x6d0 [ 2310.222699] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2310.223263] ? wait_for_completion_io+0x270/0x270 [ 2310.223825] ? rcu_read_lock_any_held+0x75/0xa0 [ 2310.224368] ? vfs_write+0x354/0xb10 [ 2310.224799] ? fput_many+0x2f/0x1a0 [ 2310.225245] ? ksys_write+0x1a9/0x260 [ 2310.225686] ? __ia32_sys_read+0xb0/0xb0 [ 2310.226154] __x64_sys_sendmmsg+0x99/0x100 [ 2310.226647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2310.227237] do_syscall_64+0x33/0x40 [ 2310.227676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2310.228259] RIP: 0033:0x7fb085b27b19 [ 2310.228692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2310.230851] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2310.231743] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2310.232556] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2310.233407] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2310.234221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2310.235053] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:49:22 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa52526141", 0x24, 0x1e0}, {0x0, 0x0, 0xc00}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="cfd0e60319f7555b00bed1471cf91a0c9cca22ad324e190100000000000000b5e1ab39b18d6b5045dbf8e7bc3dcccb4e4258ed0be9b8eac66334f8e5cb6fbc0e28dd9fabe737ad315d947a4074ff977e68f2e8342b304bcbd2000a16439a70cfdc34f00d2a165bb63fb3890e4e"]) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x810, 0xffffffffffffffff, 0x8000000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)={{r2, r3/1000+60000}, {0x0, 0x2710}}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0x10000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x1d, 0xc21}, 0x14}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0xc040, 0x0) getsockname(r0, &(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000004c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r7}}, './file0\x00'}) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0xfb, 0x3d, 0x0, 0x6, "a9b4fdac23ab76b06f3863b27a5f4012", "cd741433228021481736b33abf3b2b0ebe6f6722b3d8f20eed970e8a2e5b1612368b3c3aaec0d0ad"}, 0x3d, 0x0) chroot(&(0x7f0000000400)='./file0\x00') syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x7, 0x35f77d57, 0x0, 0x401, 0x3, 0x1}, 0x401) 00:49:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:49:22 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xb00, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:49:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000002", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2325.468779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13802 comm=syz-executor.2 [ 2325.476242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2325.498008] loop1: detected capacity change from 0 to 1536 [ 2325.516922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2325.520654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2325.535220] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:49:22 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 24) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:49:22 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r4, 0x0, 0x80, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:49:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:49:22 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:49:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2325.565664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13821 comm=syz-executor.2 00:49:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000003", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:49:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) dup3(r1, r2, 0x0) splice(r2, &(0x7f0000000000)=0x4, r0, &(0x7f0000000040)=0x755c770, 0x1, 0x2) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f00000002d00210c00000000000000000200000005"], 0xf0}}, 0x0) [ 2325.578938] FAULT_INJECTION: forcing a failure. [ 2325.578938] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.581957] CPU: 0 PID: 13818 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2325.583443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.585222] Call Trace: [ 2325.585790] dump_stack+0x107/0x167 [ 2325.586577] should_fail.cold+0x5/0xa [ 2325.587398] should_failslab+0x5/0x20 [ 2325.588214] __kmalloc_node_track_caller+0x74/0x3b0 [ 2325.589284] ? alloc_skb_with_frags+0x92/0x570 [ 2325.590267] __alloc_skb+0xb1/0x5b0 [ 2325.591060] alloc_skb_with_frags+0x92/0x570 [ 2325.592016] sock_alloc_send_pskb+0x7af/0x930 [ 2325.592987] ? sk_alloc+0x350/0x350 [ 2325.593777] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2325.594913] ? lock_chain_count+0x20/0x20 [ 2325.595802] ? lock_chain_count+0x20/0x20 [ 2325.596692] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2325.597797] ? ip_frag_init+0x350/0x350 [ 2325.598662] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2325.599697] ? ip6_mtu+0x1e9/0x3d0 [ 2325.600458] ? ip6_setup_cork+0xfb7/0x1740 [ 2325.601368] ip6_make_skb+0x2df/0x4e0 [ 2325.602179] ? ip_frag_init+0x350/0x350 [ 2325.603030] ? ip_frag_init+0x350/0x350 [ 2325.603888] ? ip6_push_pending_frames+0xf0/0xf0 [ 2325.604901] ? ip6_dst_hoplimit+0x199/0x440 [ 2325.605827] ? lock_downgrade+0x6d0/0x6d0 [ 2325.606729] udpv6_sendmsg+0x2128/0x2b40 [ 2325.607601] ? ip_frag_init+0x350/0x350 [ 2325.608460] ? udp_v6_push_pending_frames+0x360/0x360 [ 2325.609580] ? perf_event_task_disable+0x390/0x390 [ 2325.610636] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2325.611672] ? lock_acquire+0x197/0x470 [ 2325.612517] ? find_held_lock+0x2c/0x110 [ 2325.613405] ? sock_has_perm+0x1ea/0x280 [ 2325.614293] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2325.615454] ? udp_v6_push_pending_frames+0x360/0x360 [ 2325.616556] inet6_sendmsg+0x105/0x140 [ 2325.617396] ? inet6_compat_ioctl+0x320/0x320 [ 2325.618351] __sock_sendmsg+0xf2/0x190 [ 2325.619176] ____sys_sendmsg+0x334/0x870 [ 2325.620041] ? sock_write_iter+0x3d0/0x3d0 [ 2325.620930] ? do_recvmmsg+0x6d0/0x6d0 [ 2325.621767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.622882] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2325.624076] ? trace_hardirqs_on+0x5b/0x180 [ 2325.625023] ___sys_sendmsg+0xf3/0x170 [ 2325.625862] ? sendmsg_copy_msghdr+0x160/0x160 [ 2325.626832] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2325.627782] ? _raw_spin_unlock_irq+0x27/0x30 [ 2325.628733] ? finish_task_switch+0x126/0x5d0 [ 2325.629687] ? finish_task_switch+0xef/0x5d0 [ 2325.630619] ? __switch_to+0x572/0xf70 [ 2325.631441] ? __switch_to_asm+0x3a/0x60 [ 2325.632302] ? __switch_to_asm+0x34/0x60 [ 2325.633169] ? __schedule+0x82c/0x1ea0 [ 2325.633997] ? io_schedule_timeout+0x140/0x140 [ 2325.634973] __sys_sendmmsg+0x195/0x470 [ 2325.635809] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2325.636709] ? lock_downgrade+0x6d0/0x6d0 [ 2325.637603] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2325.638614] ? wait_for_completion_io+0x270/0x270 [ 2325.639628] ? rcu_read_lock_any_held+0x75/0xa0 [ 2325.640601] ? vfs_write+0x354/0xb10 [ 2325.641398] ? fput_many+0x2f/0x1a0 [ 2325.641415] ? ksys_write+0x1a9/0x260 [ 2325.641435] ? __ia32_sys_read+0xb0/0xb0 [ 2325.641458] __x64_sys_sendmmsg+0x99/0x100 [ 2325.641478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.641496] do_syscall_64+0x33/0x40 [ 2325.641515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2325.641528] RIP: 0033:0x7fb085b27b19 [ 2325.641545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:49:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2325.641556] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2325.641577] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2325.641587] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2325.641598] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.641609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2325.641620] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2325.687509] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2325.689437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2325.694748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:49:22 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2325.714306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2325.721690] loop1: detected capacity change from 0 to 1536 [ 2325.743152] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:49:22 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 25) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:49:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2325.775302] FAULT_INJECTION: forcing a failure. [ 2325.775302] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.776665] CPU: 1 PID: 13839 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2325.777482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.778440] Call Trace: [ 2325.778752] dump_stack+0x107/0x167 [ 2325.779175] should_fail.cold+0x5/0xa [ 2325.779636] ? create_object.isra.0+0x3a/0xa30 [ 2325.780168] should_failslab+0x5/0x20 [ 2325.780620] kmem_cache_alloc+0x5b/0x310 [ 2325.781117] create_object.isra.0+0x3a/0xa30 [ 2325.781628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2325.782221] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2325.782817] ? alloc_skb_with_frags+0x92/0x570 [ 2325.783348] __alloc_skb+0xb1/0x5b0 [ 2325.783782] alloc_skb_with_frags+0x92/0x570 [ 2325.784300] sock_alloc_send_pskb+0x7af/0x930 [ 2325.784825] ? sk_alloc+0x350/0x350 [ 2325.785270] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2325.785882] ? lock_chain_count+0x20/0x20 [ 2325.786364] ? lock_chain_count+0x20/0x20 [ 2325.786851] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2325.787434] ? ip_frag_init+0x350/0x350 [ 2325.787904] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2325.788465] ? ip6_mtu+0x1e9/0x3d0 [ 2325.788878] ? ip6_setup_cork+0xfb7/0x1740 [ 2325.789386] ip6_make_skb+0x2df/0x4e0 [ 2325.789827] ? ip_frag_init+0x350/0x350 [ 2325.790298] ? ip_frag_init+0x350/0x350 [ 2325.790762] ? ip6_push_pending_frames+0xf0/0xf0 [ 2325.791312] ? ip6_dst_hoplimit+0x199/0x440 [ 2325.791813] ? lock_downgrade+0x6d0/0x6d0 [ 2325.792301] udpv6_sendmsg+0x2128/0x2b40 [ 2325.792779] ? ip_frag_init+0x350/0x350 [ 2325.793265] ? udp_v6_push_pending_frames+0x360/0x360 [ 2325.793872] ? perf_event_task_disable+0x390/0x390 [ 2325.794445] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2325.795008] ? lock_acquire+0x197/0x470 [ 2325.795126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13841 comm=syz-executor.2 [ 2325.795465] ? find_held_lock+0x2c/0x110 [ 2325.795483] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2325.795501] ? sock_has_perm+0x1ea/0x280 [ 2325.799724] ? __import_iovec+0x458/0x590 [ 2325.800212] ? udp_v6_push_pending_frames+0x360/0x360 [ 2325.800814] inet6_sendmsg+0x105/0x140 [ 2325.801280] ? inet6_compat_ioctl+0x320/0x320 [ 2325.801803] __sock_sendmsg+0xf2/0x190 [ 2325.802254] ____sys_sendmsg+0x334/0x870 [ 2325.802738] ? sock_write_iter+0x3d0/0x3d0 [ 2325.803230] ? do_recvmmsg+0x6d0/0x6d0 [ 2325.803686] ? __lock_acquire+0x1657/0x5b00 [ 2325.804196] ___sys_sendmsg+0xf3/0x170 [ 2325.804650] ? sendmsg_copy_msghdr+0x160/0x160 [ 2325.805208] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.805820] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2325.806343] ? trace_hardirqs_on+0x5b/0x180 [ 2325.806849] ? lock_acquire+0x197/0x470 [ 2325.807314] ? find_held_lock+0x2c/0x110 [ 2325.807793] ? __might_fault+0xd3/0x180 [ 2325.808257] ? lock_downgrade+0x6d0/0x6d0 [ 2325.808752] __sys_sendmmsg+0x195/0x470 [ 2325.809238] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2325.809745] ? lock_downgrade+0x6d0/0x6d0 [ 2325.810247] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2325.810809] ? wait_for_completion_io+0x270/0x270 [ 2325.811374] ? rcu_read_lock_any_held+0x75/0xa0 [ 2325.811919] ? vfs_write+0x354/0xb10 [ 2325.812354] ? fput_many+0x2f/0x1a0 [ 2325.812778] ? ksys_write+0x1a9/0x260 [ 2325.813240] ? __ia32_sys_read+0xb0/0xb0 [ 2325.813717] __x64_sys_sendmmsg+0x99/0x100 [ 2325.814211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.814818] do_syscall_64+0x33/0x40 [ 2325.815252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2325.815849] RIP: 0033:0x7fb085b27b19 [ 2325.816279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.818441] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2325.819333] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2325.820167] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2325.820996] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.821841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2325.822671] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:49:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:49:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x48850) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000480)={0x51c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "03fa5576e0a3732a71c356edf430e8585f3b382e9d87d6e8eb570a92e9b530cd591df9dc366b016c3a9a2ecfe8efdc43033b72710e0230d33f385742b4ee57e1bc39d256e852dc096ac81fb8bfbe62090ec1"}, @NL80211_ATTR_TESTDATA={0x19, 0x45, "7461600a83d637c66005b57386d0ddb80c0eee4a18"}, @NL80211_ATTR_TESTDATA={0x2f, 0x45, "5d9075aec611b96039c05bef98c05e78279baf56a601439fcac559d804050a60caa153d2aaabd5dcea6f17"}, @NL80211_ATTR_TESTDATA={0xfe, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xcc, 0x45, "56ca4f1c466aaf80b364c416fcf62b6a180571e56e5eda9fb6ec1917e01c5d97bfcd84984c51e09c67da351d3b9f6e388fabca0ab7c6497583be0b67f559e040975dc17795e7212c2a2911c9d45b258836f9e2855c6078dfa102558cb018aaea9d47802d863c9b38b8ad6f08f87629ed25720264c62122c9d8367bea77bf203ade5f46945f8ac5e8afb39ad55cff889cba754a75f07e0b601e4dbc2872d458b8d5f368dcb6192c6093a1559ffedc8f10db0e85879ad77bca31cdcd239b84a3eae152493b3d475ec5"}, @NL80211_ATTR_TESTDATA={0xa6, 0x45, "4fb1be09be5ef57761ba6f166373fe881c544cca87b9dc32a0038d455c0f530f695f5ed95cfff01de796932266a53714cac9e7253f882ef930ffebaf4ff4d5dadaed0983dfc47da7743356ea2a251cb26ab23af5be7ef35ca8f226326d15720c79ed0d6d949651ac8aa1f85672f67bb3c60ae7e652cc4e56900ecf5bc311715523819369086d4d72d19044c3ea9eb99955a15fec74c7c7a68471ccdcb4a752c93710"}, @NL80211_ATTR_TESTDATA={0x102, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xe9, 0x45, "f395c4af61f6deda171545da9b433788f2f8a14f938d3cc0d96b9242d2aabdc96fedf0b9fdd37b6c6a2062fdb1b26ca32ab41670c1e0abd3b85240ab74621f3b11413343c9b71baff95008dc7df666b18ae5aaf5462661fab6f60f6e0da90044c501c8dd425e61dd6e6b9f48b9ce07053d7cc969b26b5ae9b6a8ca3271cfe9b9caf6f82f8849a2b94605011803dd4e0cf6c7476a101fd6b6d31bee09cad0e3ddd65d1a762b33fc33eddc7757c4f015c32e815b6499ce1781db15c3f40ad0702ce4c942818edefe547314f4ee13875669429c187621c6fcd3cb167623c9e5798b868bc93526"}]}, 0x51c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4) openat(r3, &(0x7f00000003c0)='./file2\x00', 0x80200, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000280)={0x1, 0x2}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x7a}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8000) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) 00:49:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000004", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2325.936034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2325.948818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2325.963319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2326.002927] loop1: detected capacity change from 0 to 1536 [ 2326.018563] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:49:37 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8000) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:49:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:49:37 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1020, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:49:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000040)={'batadv0\x00', 0x0}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x4, 0x100, 0x1}, 0x200) 00:49:37 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 26) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:49:37 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:49:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000005", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:49:37 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2340.955564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2340.958735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13873 comm=syz-executor.2 [ 2340.974344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2340.981830] loop1: detected capacity change from 0 to 1536 [ 2341.000845] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2341.007001] FAULT_INJECTION: forcing a failure. [ 2341.007001] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.009875] CPU: 0 PID: 13874 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2341.011286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.013005] Call Trace: [ 2341.013559] dump_stack+0x107/0x167 [ 2341.014325] should_fail.cold+0x5/0xa [ 2341.015109] ? create_object.isra.0+0x3a/0xa30 [ 2341.016066] should_failslab+0x5/0x20 [ 2341.016875] kmem_cache_alloc+0x5b/0x310 [ 2341.017729] ? lock_acquire+0x197/0x470 [ 2341.018562] create_object.isra.0+0x3a/0xa30 [ 2341.019495] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.020559] kmem_cache_alloc+0x159/0x310 [ 2341.021452] skb_clone+0x14f/0x3d0 [ 2341.022202] dev_queue_xmit_nit+0x3a7/0xb00 [ 2341.023130] dev_hard_start_xmit+0xab/0x6f0 [ 2341.024050] __dev_queue_xmit+0x179a/0x2690 [ 2341.024956] ? find_held_lock+0x2c/0x110 [ 2341.025831] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2341.026799] ? mark_held_locks+0x9e/0xe0 [ 2341.027650] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2341.028756] ip6_finish_output2+0x158f/0x1cf0 [ 2341.029718] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2341.030771] ip6_output+0x302/0x9e0 [ 2341.031534] ? __ip6_finish_output.part.0+0xbc0/0xbc0 [ 2341.032605] ip6_local_out+0xd2/0x4c0 [ 2341.033408] ip6_send_skb+0x117/0x460 [ 2341.034206] ip6_push_pending_frames+0xbd/0xf0 [ 2341.035170] icmpv6_push_pending_frames+0x29c/0x470 [ 2341.036257] icmp6_send+0x16ad/0x1f30 [ 2341.037120] ? icmpv6_push_pending_frames+0x470/0x470 [ 2341.038255] ? find_held_lock+0x2c/0x110 [ 2341.039131] ? ip6_dst_hoplimit+0x440/0x440 [ 2341.040054] ip6_pkt_drop+0x3d2/0x7f0 [ 2341.040853] ? ip6_pkt_discard+0x20/0x20 [ 2341.041713] ip6_local_out+0x29f/0x4c0 [ 2341.042565] ip6_send_skb+0x117/0x460 [ 2341.043402] udp_v6_send_skb+0x7b7/0x1620 [ 2341.044344] udpv6_sendmsg+0x216b/0x2b40 [ 2341.045294] ? ip_frag_init+0x350/0x350 [ 2341.046156] ? udp_v6_push_pending_frames+0x360/0x360 [ 2341.047270] ? perf_event_task_disable+0x390/0x390 [ 2341.048328] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2341.049335] ? lock_acquire+0x197/0x470 [ 2341.050159] ? find_held_lock+0x2c/0x110 [ 2341.051044] ? sock_has_perm+0x1ea/0x280 [ 2341.051935] ? __import_iovec+0x458/0x590 [ 2341.052820] ? udp_v6_push_pending_frames+0x360/0x360 [ 2341.053904] inet6_sendmsg+0x105/0x140 [ 2341.054747] ? inet6_compat_ioctl+0x320/0x320 [ 2341.055703] __sock_sendmsg+0xf2/0x190 [ 2341.056518] ____sys_sendmsg+0x334/0x870 [ 2341.057365] ? sock_write_iter+0x3d0/0x3d0 [ 2341.058246] ? do_recvmmsg+0x6d0/0x6d0 [ 2341.059073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.060230] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2341.061396] ? trace_hardirqs_on+0x5b/0x180 [ 2341.062319] ___sys_sendmsg+0xf3/0x170 [ 2341.063131] ? sendmsg_copy_msghdr+0x160/0x160 [ 2341.064082] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2341.065005] ? _raw_spin_unlock_irq+0x27/0x30 [ 2341.065938] ? finish_task_switch+0x126/0x5d0 [ 2341.066858] ? finish_task_switch+0xef/0x5d0 [ 2341.067755] ? __switch_to+0x572/0xf70 [ 2341.068552] ? __switch_to_asm+0x3a/0x60 [ 2341.069384] ? __switch_to_asm+0x34/0x60 [ 2341.070234] ? __schedule+0x82c/0x1ea0 [ 2341.071074] ? io_schedule_timeout+0x140/0x140 [ 2341.072202] __sys_sendmmsg+0x195/0x470 [ 2341.073212] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2341.074322] ? lock_downgrade+0x6d0/0x6d0 [ 2341.075317] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2341.076378] ? wait_for_completion_io+0x270/0x270 [ 2341.077411] ? rcu_read_lock_any_held+0x75/0xa0 [ 2341.078399] ? vfs_write+0x354/0xb10 [ 2341.079243] ? fput_many+0x2f/0x1a0 [ 2341.080026] ? ksys_write+0x1a9/0x260 [ 2341.080867] ? __ia32_sys_read+0xb0/0xb0 [ 2341.081744] __x64_sys_sendmmsg+0x99/0x100 [ 2341.082677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.083816] do_syscall_64+0x33/0x40 [ 2341.084633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2341.085807] RIP: 0033:0x7fb085b27b19 [ 2341.086599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.090555] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2341.092172] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2341.093729] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2341.095230] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2341.096754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.098268] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:49:38 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2341.172477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2341.196465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2341.210243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:49:38 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:49:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000007", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:49:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:49:38 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2341.325954] loop1: detected capacity change from 0 to 1536 00:49:38 executing program 3: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r4, 0x0, 0x80, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2341.349460] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:49:38 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2341.380807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13906 comm=syz-executor.2 [ 2341.386889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2341.405198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:49:38 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2010, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2341.536219] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:49:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:49:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000004", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2356.782599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13927 comm=syz-executor.2 00:49:53 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:49:53 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:49:53 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 27) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2356.809394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:49:53 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8000) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:49:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003000000000000000c", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:49:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:49:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000004", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2356.832246] loop1: detected capacity change from 0 to 1536 [ 2356.839111] FAULT_INJECTION: forcing a failure. [ 2356.839111] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.841627] CPU: 0 PID: 13933 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2356.843128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2356.844229] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2356.844920] Call Trace: [ 2356.844949] dump_stack+0x107/0x167 [ 2356.844974] should_fail.cold+0x5/0xa [ 2356.848373] ? create_object.isra.0+0x3a/0xa30 [ 2356.849361] should_failslab+0x5/0x20 [ 2356.850204] kmem_cache_alloc+0x5b/0x310 [ 2356.851087] ? mark_lock+0xf5/0x2df0 [ 2356.851903] create_object.isra.0+0x3a/0xa30 [ 2356.852854] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2356.853973] kmem_cache_alloc_node+0x169/0x330 [ 2356.854967] ? fib6_table_lookup+0x636/0xaf0 [ 2356.855931] __alloc_skb+0x6d/0x5b0 [ 2356.856736] alloc_skb_with_frags+0x92/0x570 [ 2356.857699] ? mark_lock+0xf5/0x2df0 [ 2356.858506] ? mark_lock+0xf5/0x2df0 [ 2356.859323] sock_alloc_send_pskb+0x7af/0x930 [ 2356.860310] ? sk_alloc+0x350/0x350 [ 2356.861099] ? find_held_lock+0x2c/0x110 [ 2356.861997] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2356.863148] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2356.864244] ? rawv6_exit+0x20/0x20 [ 2356.865048] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2356.866105] ? ip6_mtu+0x1e9/0x3d0 [ 2356.866880] ? ip6_setup_cork+0xfb7/0x1740 [ 2356.867803] ip6_append_data+0x1e6/0x330 [ 2356.868679] ? rawv6_exit+0x20/0x20 [ 2356.869500] ? rawv6_exit+0x20/0x20 [ 2356.870304] icmp6_send+0x1250/0x1f30 [ 2356.871166] ? icmpv6_push_pending_frames+0x470/0x470 [ 2356.872294] ? find_held_lock+0x2c/0x110 [ 2356.873215] ? ip6_dst_hoplimit+0x440/0x440 [ 2356.874179] ip6_pkt_drop+0x3d2/0x7f0 [ 2356.875017] ? ip6_pkt_discard+0x20/0x20 [ 2356.875913] ip6_local_out+0x29f/0x4c0 [ 2356.876768] ip6_send_skb+0x117/0x460 [ 2356.877613] udp_v6_send_skb+0x7b7/0x1620 [ 2356.878530] udpv6_sendmsg+0x216b/0x2b40 [ 2356.879418] ? ip_frag_init+0x350/0x350 [ 2356.880293] ? udp_v6_push_pending_frames+0x360/0x360 [ 2356.881442] ? perf_event_task_disable+0x390/0x390 [ 2356.882514] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2356.883566] ? lock_acquire+0x197/0x470 [ 2356.884435] ? find_held_lock+0x2c/0x110 [ 2356.885332] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2356.886524] ? sock_has_perm+0x1ea/0x280 [ 2356.887431] ? __import_iovec+0x458/0x590 [ 2356.888333] ? udp_v6_push_pending_frames+0x360/0x360 [ 2356.889459] inet6_sendmsg+0x105/0x140 [ 2356.890305] ? inet6_compat_ioctl+0x320/0x320 [ 2356.891277] __sock_sendmsg+0xf2/0x190 [ 2356.892125] ____sys_sendmsg+0x334/0x870 [ 2356.893014] ? sock_write_iter+0x3d0/0x3d0 [ 2356.893936] ? do_recvmmsg+0x6d0/0x6d0 [ 2356.894785] ? __lock_acquire+0x1657/0x5b00 [ 2356.895732] ___sys_sendmsg+0xf3/0x170 [ 2356.896577] ? sendmsg_copy_msghdr+0x160/0x160 [ 2356.897578] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2356.898548] ? _raw_spin_unlock_irq+0x27/0x30 [ 2356.899535] ? lock_acquire+0x197/0x470 [ 2356.900398] ? find_held_lock+0x2c/0x110 [ 2356.901287] ? __might_fault+0xd3/0x180 [ 2356.902161] ? lock_downgrade+0x6d0/0x6d0 [ 2356.903086] __sys_sendmmsg+0x195/0x470 [ 2356.903960] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2356.904899] ? lock_downgrade+0x6d0/0x6d0 [ 2356.905825] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2356.906874] ? wait_for_completion_io+0x270/0x270 [ 2356.907929] ? rcu_read_lock_any_held+0x75/0xa0 [ 2356.908937] ? vfs_write+0x354/0xb10 [ 2356.909755] ? fput_many+0x2f/0x1a0 [ 2356.910548] ? ksys_write+0x1a9/0x260 [ 2356.911377] ? __ia32_sys_read+0xb0/0xb0 [ 2356.912264] __x64_sys_sendmmsg+0x99/0x100 [ 2356.913188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2356.914315] do_syscall_64+0x33/0x40 [ 2356.915128] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2356.916239] RIP: 0033:0x7fb085b27b19 [ 2356.917050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.921061] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2356.922736] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2356.924286] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2356.925842] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.927397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2356.928942] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2356.994180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:49:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:49:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003000000000000000f", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2357.034877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2357.043281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:49:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000004", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:49:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:49:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x40000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2357.111104] loop1: detected capacity change from 0 to 1536 [ 2357.114792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13965 comm=syz-executor.2 [ 2357.127321] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2357.140761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2357.158879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:49:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000066510", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2357.180095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2357.229925] loop1: detected capacity change from 0 to 1536 [ 2357.264910] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:50:07 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xedc0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:50:07 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 1) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:50:07 executing program 0: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8000) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:50:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003000000000000001b", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:50:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2370.774714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13985 comm=syz-executor.2 [ 2370.787971] FAULT_INJECTION: forcing a failure. [ 2370.787971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2370.790840] CPU: 1 PID: 13977 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2370.792459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2370.794450] Call Trace: [ 2370.795100] dump_stack+0x107/0x167 [ 2370.795985] should_fail.cold+0x5/0xa [ 2370.796913] _copy_from_user+0x2e/0x1b0 [ 2370.797898] __copy_msghdr_from_user+0x91/0x4b0 [ 2370.798024] FAULT_INJECTION: forcing a failure. [ 2370.798024] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.799018] ? __ia32_sys_shutdown+0x80/0x80 [ 2370.799051] ? __lock_acquire+0xbb1/0x5b00 [ 2370.799079] sendmsg_copy_msghdr+0xa1/0x160 [ 2370.803608] ? do_recvmmsg+0x6d0/0x6d0 [ 2370.804557] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2370.805843] ? mark_lock+0xf5/0x2df0 [ 2370.806749] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2370.808006] ? __lock_acquire+0x1657/0x5b00 [ 2370.809051] ___sys_sendmsg+0xc6/0x170 [ 2370.810011] ? sendmsg_copy_msghdr+0x160/0x160 [ 2370.811117] ? __fget_files+0x2cf/0x520 [ 2370.812067] ? lock_downgrade+0x6d0/0x6d0 [ 2370.813066] ? lock_downgrade+0x6d0/0x6d0 [ 2370.814074] ? __fget_files+0x2f8/0x520 [ 2370.815038] ? __fget_light+0xea/0x290 [ 2370.815973] __sys_sendmmsg+0x195/0x470 [ 2370.816938] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2370.818027] ? lock_downgrade+0x6d0/0x6d0 [ 2370.819027] ? ksys_write+0x12d/0x260 [ 2370.819944] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2370.821105] ? wait_for_completion_io+0x270/0x270 [ 2370.822270] ? rcu_read_lock_any_held+0x75/0xa0 [ 2370.823377] ? vfs_write+0x354/0xb10 [ 2370.824269] ? fput_many+0x2f/0x1a0 [ 2370.825140] ? ksys_write+0x1a9/0x260 [ 2370.826068] ? __ia32_sys_read+0xb0/0xb0 [ 2370.827052] __x64_sys_sendmmsg+0x99/0x100 [ 2370.828067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.829301] do_syscall_64+0x33/0x40 [ 2370.830204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2370.831439] RIP: 0033:0x7f6d6f62cb19 [ 2370.832334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.836769] RSP: 002b:00007f6d6cba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2370.838601] RAX: ffffffffffffffda RBX: 00007f6d6f73ff60 RCX: 00007f6d6f62cb19 [ 2370.840311] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2370.842035] RBP: 00007f6d6cba21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.843743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2370.845456] R13: 00007ffda70381cf R14: 00007f6d6cba2300 R15: 0000000000022000 [ 2370.847199] CPU: 0 PID: 13988 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2370.848116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2370.849185] Call Trace: [ 2370.849528] dump_stack+0x107/0x167 [ 2370.850008] should_fail.cold+0x5/0xa [ 2370.850495] ? ___slab_alloc+0x470/0x700 [ 2370.851020] ? create_object.isra.0+0x3a/0xa30 [ 2370.851603] should_failslab+0x5/0x20 [ 2370.852096] kmem_cache_alloc+0x5b/0x310 [ 2370.852621] create_object.isra.0+0x3a/0xa30 [ 2370.853179] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2370.853844] kmem_cache_alloc_node+0x169/0x330 [ 2370.854434] __alloc_skb+0x6d/0x5b0 [ 2370.854906] alloc_skb_with_frags+0x92/0x570 [ 2370.855473] ? mark_lock+0xf5/0x2df0 [ 2370.855952] ? mark_lock+0xf5/0x2df0 [ 2370.856437] sock_alloc_send_pskb+0x7af/0x930 [ 2370.857021] ? sk_alloc+0x350/0x350 [ 2370.857482] ? find_held_lock+0x2c/0x110 [ 2370.858012] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2370.858193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2370.858695] __ip6_append_data.isra.0+0x1cd4/0x3b90 00:50:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x48000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:50:07 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 28) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:50:07 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8000) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2370.858716] ? rawv6_exit+0x20/0x20 [ 2370.858737] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2370.862671] ? ip6_mtu+0x1e9/0x3d0 [ 2370.863120] ? ip6_setup_cork+0xfb7/0x1740 [ 2370.863674] ip6_append_data+0x1e6/0x330 [ 2370.864195] ? rawv6_exit+0x20/0x20 [ 2370.864667] ? rawv6_exit+0x20/0x20 [ 2370.865138] icmp6_send+0x1250/0x1f30 [ 2370.865660] ? icmpv6_push_pending_frames+0x470/0x470 [ 2370.866333] ? find_held_lock+0x2c/0x110 [ 2370.866897] ? ip6_dst_hoplimit+0x440/0x440 [ 2370.867471] ip6_pkt_drop+0x3d2/0x7f0 [ 2370.867983] ? ip6_pkt_discard+0x20/0x20 [ 2370.868509] ip6_local_out+0x29f/0x4c0 [ 2370.869013] ip6_send_skb+0x117/0x460 [ 2370.869512] udp_v6_send_skb+0x7b7/0x1620 [ 2370.870067] udpv6_sendmsg+0x216b/0x2b40 [ 2370.870595] ? ip_frag_init+0x350/0x350 [ 2370.871123] ? udp_v6_push_pending_frames+0x360/0x360 [ 2370.871810] ? perf_event_task_disable+0x390/0x390 [ 2370.872459] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2370.873107] ? lock_acquire+0x197/0x470 [ 2370.873203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2370.873639] ? find_held_lock+0x2c/0x110 [ 2370.873661] ? sock_has_perm+0x1ea/0x280 [ 2370.873690] ? __import_iovec+0x458/0x590 [ 2370.877198] ? udp_v6_push_pending_frames+0x360/0x360 [ 2370.877867] inet6_sendmsg+0x105/0x140 [ 2370.878364] ? inet6_compat_ioctl+0x320/0x320 [ 2370.878947] __sock_sendmsg+0xf2/0x190 [ 2370.879441] ____sys_sendmsg+0x334/0x870 [ 2370.879950] ? sock_write_iter+0x3d0/0x3d0 [ 2370.880489] ? do_recvmmsg+0x6d0/0x6d0 [ 2370.880988] ? __lock_acquire+0x1657/0x5b00 [ 2370.881543] ___sys_sendmsg+0xf3/0x170 [ 2370.882049] ? sendmsg_copy_msghdr+0x160/0x160 [ 2370.882634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2370.883295] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2370.883866] ? trace_hardirqs_on+0x5b/0x180 [ 2370.884419] ? lock_acquire+0x197/0x470 [ 2370.884918] ? find_held_lock+0x2c/0x110 [ 2370.885441] ? __might_fault+0xd3/0x180 [ 2370.885956] ? lock_downgrade+0x6d0/0x6d0 [ 2370.886493] __sys_sendmmsg+0x195/0x470 [ 2370.886997] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2370.887544] ? lock_downgrade+0x6d0/0x6d0 [ 2370.888081] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2370.888693] ? wait_for_completion_io+0x270/0x270 [ 2370.889311] ? rcu_read_lock_any_held+0x75/0xa0 [ 2370.889907] ? vfs_write+0x354/0xb10 [ 2370.890376] ? fput_many+0x2f/0x1a0 [ 2370.890835] ? ksys_write+0x1a9/0x260 [ 2370.891315] ? __ia32_sys_read+0xb0/0xb0 [ 2370.891829] __x64_sys_sendmmsg+0x99/0x100 [ 2370.892370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.893024] do_syscall_64+0x33/0x40 [ 2370.893498] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2370.894154] RIP: 0033:0x7fb085b27b19 [ 2370.894624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.896954] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2370.897927] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2370.898838] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2370.899751] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.900653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.901547] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2370.905224] loop1: detected capacity change from 0 to 1536 [ 2370.916959] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2370.932797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:50:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x4c000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:50:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000020", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2370.976787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:50:07 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2370.989770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:50:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:50:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x68000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2371.056265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14012 comm=syz-executor.2 [ 2371.058560] loop1: detected capacity change from 0 to 1536 [ 2371.078795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2371.080413] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2371.087484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:50:08 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2371.107523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:50:08 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 2) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:50:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000027", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:50:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2371.187596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14028 comm=syz-executor.2 [ 2371.192926] FAULT_INJECTION: forcing a failure. [ 2371.192926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2371.194589] CPU: 0 PID: 14026 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2371.195391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.196366] Call Trace: [ 2371.196680] dump_stack+0x107/0x167 [ 2371.197110] should_fail.cold+0x5/0xa [ 2371.197560] _copy_from_user+0x2e/0x1b0 [ 2371.198038] iovec_from_user+0x141/0x400 [ 2371.198535] __import_iovec+0x67/0x590 [ 2371.198997] ? __ia32_sys_shutdown+0x80/0x80 [ 2371.199527] import_iovec+0x83/0xb0 [ 2371.199958] sendmsg_copy_msghdr+0x131/0x160 [ 2371.200482] ? do_recvmmsg+0x6d0/0x6d0 [ 2371.200499] ? mark_lock+0xf5/0x2df0 [ 2371.200512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2371.200522] ? __lock_acquire+0x1657/0x5b00 [ 2371.200534] ___sys_sendmsg+0xc6/0x170 [ 2371.200544] ? sendmsg_copy_msghdr+0x160/0x160 [ 2371.200558] ? __fget_files+0x2cf/0x520 [ 2371.200568] ? lock_downgrade+0x6d0/0x6d0 [ 2371.200582] ? lock_downgrade+0x6d0/0x6d0 [ 2371.200595] ? __fget_files+0x2f8/0x520 [ 2371.200610] ? __fget_light+0xea/0x290 [ 2371.200623] __sys_sendmmsg+0x195/0x470 [ 2371.200635] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2371.200646] ? lock_downgrade+0x6d0/0x6d0 [ 2371.200659] ? ksys_write+0x12d/0x260 [ 2371.200674] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2371.200685] ? wait_for_completion_io+0x270/0x270 [ 2371.200699] ? rcu_read_lock_any_held+0x75/0xa0 [ 2371.200709] ? vfs_write+0x354/0xb10 [ 2371.200719] ? fput_many+0x2f/0x1a0 [ 2371.200728] ? ksys_write+0x1a9/0x260 [ 2371.200740] ? __ia32_sys_read+0xb0/0xb0 [ 2371.200752] __x64_sys_sendmmsg+0x99/0x100 [ 2371.200764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.200774] do_syscall_64+0x33/0x40 [ 2371.200786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2371.200793] RIP: 0033:0x7f6d6f62cb19 [ 2371.200803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.200809] RSP: 002b:00007f6d6cba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2371.200821] RAX: ffffffffffffffda RBX: 00007f6d6f73ff60 RCX: 00007f6d6f62cb19 [ 2371.200827] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2371.200834] RBP: 00007f6d6cba21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.200840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2371.200846] R13: 00007ffda70381cf R14: 00007f6d6cba2300 R15: 0000000000022000 [ 2371.281974] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2386.254425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2386.263864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14048 comm=syz-executor.2 00:50:23 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 3) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:50:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x6c000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:50:23 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:50:23 executing program 0: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8000) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:50:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:50:23 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 29) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:50:23 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2386.268285] loop1: detected capacity change from 0 to 1536 [ 2386.274502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2386.278311] FAULT_INJECTION: forcing a failure. [ 2386.278311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2386.281252] CPU: 1 PID: 14045 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2386.282861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.284770] Call Trace: [ 2386.285388] dump_stack+0x107/0x167 [ 2386.286247] should_fail.cold+0x5/0xa [ 2386.287140] _copy_to_user+0x2e/0x180 [ 2386.288037] simple_read_from_buffer+0xcc/0x160 [ 2386.289128] proc_fail_nth_read+0x198/0x230 [ 2386.290155] ? proc_sessionid_read+0x230/0x230 [ 2386.291221] ? security_file_permission+0xb1/0xe0 [ 2386.292351] ? proc_sessionid_read+0x230/0x230 [ 2386.293413] vfs_read+0x228/0x620 [ 2386.294233] ksys_read+0x12d/0x260 [ 2386.295072] ? vfs_write+0xb10/0xb10 [ 2386.295956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.297265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.297291] do_syscall_64+0x33/0x40 00:50:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000040", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:50:23 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2386.297313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2386.297327] RIP: 0033:0x7f6d6f5df69c [ 2386.297347] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2386.297359] RSP: 002b:00007f6d6cba2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2386.297382] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f6d6f5df69c 00:50:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003ffffffffffffffff", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:50:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x74000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2386.297403] RDX: 000000000000000f RSI: 00007f6d6cba21e0 RDI: 0000000000000008 [ 2386.297415] RBP: 00007f6d6cba21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2386.297427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2386.297440] R13: 00007ffda70381cf R14: 00007f6d6cba2300 R15: 0000000000022000 [ 2386.299080] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2386.304979] FAULT_INJECTION: forcing a failure. [ 2386.304979] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.304995] CPU: 0 PID: 14051 Comm: syz-executor.4 Not tainted 5.10.247 #1 00:50:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x7a000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2386.305003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.305008] Call Trace: [ 2386.305029] dump_stack+0x107/0x167 [ 2386.305045] should_fail.cold+0x5/0xa [ 2386.305062] ? create_object.isra.0+0x3a/0xa30 [ 2386.305075] should_failslab+0x5/0x20 [ 2386.305088] kmem_cache_alloc+0x5b/0x310 [ 2386.305105] create_object.isra.0+0x3a/0xa30 [ 2386.305116] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2386.305134] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2386.305148] ? alloc_skb_with_frags+0x92/0x570 [ 2386.305161] ? fib6_table_lookup+0x636/0xaf0 [ 2386.305178] __alloc_skb+0xb1/0x5b0 [ 2386.305196] alloc_skb_with_frags+0x92/0x570 [ 2386.305212] ? mark_lock+0xf5/0x2df0 [ 2386.305226] ? mark_lock+0xf5/0x2df0 [ 2386.305241] sock_alloc_send_pskb+0x7af/0x930 [ 2386.305263] ? sk_alloc+0x350/0x350 [ 2386.305276] ? find_held_lock+0x2c/0x110 [ 2386.305292] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2386.305316] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2386.305338] ? rawv6_exit+0x20/0x20 [ 2386.305360] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2386.305372] ? ip6_mtu+0x1e9/0x3d0 [ 2386.305385] ? ip6_setup_cork+0xfb7/0x1740 00:50:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030002000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2386.305400] ip6_append_data+0x1e6/0x330 [ 2386.305411] ? rawv6_exit+0x20/0x20 [ 2386.305424] ? rawv6_exit+0x20/0x20 [ 2386.305441] icmp6_send+0x1250/0x1f30 [ 2386.305467] ? icmpv6_push_pending_frames+0x470/0x470 [ 2386.305480] ? find_held_lock+0x2c/0x110 [ 2386.305515] ? ip6_dst_hoplimit+0x440/0x440 [ 2386.305540] ip6_pkt_drop+0x3d2/0x7f0 [ 2386.305554] ? ip6_pkt_discard+0x20/0x20 [ 2386.305565] ip6_local_out+0x29f/0x4c0 [ 2386.305581] ip6_send_skb+0x117/0x460 [ 2386.305598] udp_v6_send_skb+0x7b7/0x1620 [ 2386.305621] udpv6_sendmsg+0x216b/0x2b40 [ 2386.305638] ? ip_frag_init+0x350/0x350 [ 2386.305659] ? udp_v6_push_pending_frames+0x360/0x360 [ 2386.305678] ? perf_event_task_disable+0x390/0x390 [ 2386.305694] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2386.305713] ? lock_acquire+0x197/0x470 [ 2386.305724] ? find_held_lock+0x2c/0x110 [ 2386.305748] ? sock_has_perm+0x1ea/0x280 [ 2386.305791] ? __import_iovec+0x458/0x590 [ 2386.305806] ? udp_v6_push_pending_frames+0x360/0x360 [ 2386.305820] inet6_sendmsg+0x105/0x140 00:50:23 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2386.305832] ? inet6_compat_ioctl+0x320/0x320 [ 2386.305844] __sock_sendmsg+0xf2/0x190 [ 2386.305859] ____sys_sendmsg+0x334/0x870 [ 2386.305875] ? sock_write_iter+0x3d0/0x3d0 [ 2386.305885] ? do_recvmmsg+0x6d0/0x6d0 [ 2386.305905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.305920] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2386.305931] ? trace_hardirqs_on+0x5b/0x180 [ 2386.305946] ___sys_sendmsg+0xf3/0x170 [ 2386.305960] ? sendmsg_copy_msghdr+0x160/0x160 [ 2386.305974] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2386.305987] ? _raw_spin_unlock_irq+0x27/0x30 [ 2386.306002] ? finish_task_switch+0x126/0x5d0 [ 2386.306012] ? finish_task_switch+0xef/0x5d0 [ 2386.306023] ? __switch_to+0x572/0xf70 [ 2386.306034] ? __switch_to_asm+0x3a/0x60 [ 2386.306045] ? __switch_to_asm+0x34/0x60 [ 2386.306059] ? __schedule+0x82c/0x1ea0 [ 2386.306077] ? io_schedule_timeout+0x140/0x140 [ 2386.306100] __sys_sendmmsg+0x195/0x470 [ 2386.306116] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2386.306129] ? lock_downgrade+0x6d0/0x6d0 [ 2386.306154] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2386.306169] ? wait_for_completion_io+0x270/0x270 [ 2386.306185] ? rcu_read_lock_any_held+0x75/0xa0 [ 2386.306197] ? vfs_write+0x354/0xb10 [ 2386.306210] ? fput_many+0x2f/0x1a0 [ 2386.306222] ? ksys_write+0x1a9/0x260 [ 2386.306236] ? __ia32_sys_read+0xb0/0xb0 [ 2386.306253] __x64_sys_sendmmsg+0x99/0x100 [ 2386.306267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.306279] do_syscall_64+0x33/0x40 [ 2386.306293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2386.306302] RIP: 0033:0x7fb085b27b19 [ 2386.306314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.306322] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2386.306336] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2386.306344] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2386.306352] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2386.306359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.306367] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2386.412269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2386.415796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2386.426089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2386.468840] loop1: detected capacity change from 0 to 1536 [ 2386.473897] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2386.559512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2386.567980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2386.628334] loop1: detected capacity change from 0 to 1536 [ 2386.637256] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2399.443293] loop1: detected capacity change from 0 to 1536 [ 2399.452050] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:50:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:50:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:50:36 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x3000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:50:36 executing program 0: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8000) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:50:36 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 30) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:50:36 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x94, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:50:36 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:50:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030003000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:50:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030004000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2399.488817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14104 comm=syz-executor.2 [ 2399.494498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2399.510714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2399.511223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2399.514226] loop1: detected capacity change from 0 to 1536 [ 2399.534008] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2399.543872] FAULT_INJECTION: forcing a failure. [ 2399.543872] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.546657] CPU: 0 PID: 14105 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2399.548295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2399.550291] Call Trace: [ 2399.550914] dump_stack+0x107/0x167 [ 2399.551772] should_fail.cold+0x5/0xa [ 2399.552671] ? create_object.isra.0+0x3a/0xa30 [ 2399.553760] should_failslab+0x5/0x20 [ 2399.554661] kmem_cache_alloc+0x5b/0x310 00:50:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030005000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2399.555622] create_object.isra.0+0x3a/0xa30 [ 2399.556789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2399.557995] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2399.559183] ? alloc_skb_with_frags+0x92/0x570 [ 2399.560247] ? fib6_table_lookup+0x636/0xaf0 [ 2399.561276] __alloc_skb+0xb1/0x5b0 [ 2399.562140] alloc_skb_with_frags+0x92/0x570 [ 2399.563168] ? mark_lock+0xf5/0x2df0 [ 2399.564033] ? mark_lock+0xf5/0x2df0 [ 2399.564911] sock_alloc_send_pskb+0x7af/0x930 [ 2399.565975] ? sk_alloc+0x350/0x350 [ 2399.566820] ? find_held_lock+0x2c/0x110 [ 2399.567769] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2399.569003] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2399.570186] ? rawv6_exit+0x20/0x20 [ 2399.571053] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2399.572170] ? ip6_mtu+0x1e9/0x3d0 [ 2399.572993] ? ip6_setup_cork+0xfb7/0x1740 00:50:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2399.573979] ip6_append_data+0x1e6/0x330 [ 2399.574974] ? rawv6_exit+0x20/0x20 [ 2399.575839] ? rawv6_exit+0x20/0x20 [ 2399.576712] icmp6_send+0x1250/0x1f30 [ 2399.577612] ? icmpv6_push_pending_frames+0x470/0x470 [ 2399.578817] ? find_held_lock+0x2c/0x110 [ 2399.579793] ? ip6_dst_hoplimit+0x440/0x440 [ 2399.580800] ip6_pkt_drop+0x3d2/0x7f0 [ 2399.581674] ? ip6_pkt_discard+0x20/0x20 [ 2399.582614] ip6_local_out+0x29f/0x4c0 [ 2399.583512] ip6_send_skb+0x117/0x460 [ 2399.584392] udp_v6_send_skb+0x7b7/0x1620 [ 2399.585358] udpv6_sendmsg+0x216b/0x2b40 [ 2399.586306] ? ip_frag_init+0x350/0x350 [ 2399.587240] ? udp_v6_push_pending_frames+0x360/0x360 [ 2399.588447] ? lock_acquire+0x197/0x470 [ 2399.589358] ? find_held_lock+0x2c/0x110 [ 2399.590314] ? sock_has_perm+0x1ea/0x280 [ 2399.591281] ? __import_iovec+0x458/0x590 [ 2399.592234] ? udp_v6_push_pending_frames+0x360/0x360 [ 2399.593411] inet6_sendmsg+0x105/0x140 [ 2399.594299] ? inet6_compat_ioctl+0x320/0x320 [ 2399.595318] __sock_sendmsg+0xf2/0x190 [ 2399.596207] ____sys_sendmsg+0x334/0x870 [ 2399.597138] ? sock_write_iter+0x3d0/0x3d0 [ 2399.598108] ? do_recvmmsg+0x6d0/0x6d0 [ 2399.599000] ? __lock_acquire+0x1657/0x5b00 [ 2399.599998] ___sys_sendmsg+0xf3/0x170 [ 2399.600885] ? sendmsg_copy_msghdr+0x160/0x160 [ 2399.601942] ? __fget_files+0x2cf/0x520 [ 2399.602849] ? lock_acquire+0x197/0x470 [ 2399.603749] ? find_held_lock+0x2c/0x110 [ 2399.604672] ? __might_fault+0xd3/0x180 [ 2399.605590] ? lock_downgrade+0x6d0/0x6d0 [ 2399.606550] __sys_sendmmsg+0x195/0x470 [ 2399.607456] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2399.608433] ? lock_downgrade+0x6d0/0x6d0 [ 2399.609390] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2399.610493] ? wait_for_completion_io+0x270/0x270 [ 2399.611588] ? rcu_read_lock_any_held+0x75/0xa0 [ 2399.612637] ? vfs_write+0x354/0xb10 [ 2399.613471] ? fput_many+0x2f/0x1a0 [ 2399.614292] ? ksys_write+0x1a9/0x260 [ 2399.615149] ? __ia32_sys_read+0xb0/0xb0 [ 2399.616073] __x64_sys_sendmmsg+0x99/0x100 [ 2399.617024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2399.618176] do_syscall_64+0x33/0x40 [ 2399.619015] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2399.620167] RIP: 0033:0x7fb085b27b19 [ 2399.621008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2399.625140] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2399.626865] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2399.628476] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2399.630082] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2399.631684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2399.633287] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2399.650787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14117 comm=syz-executor.2 00:50:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xae030000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2399.706299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2399.706550] loop1: detected capacity change from 0 to 1536 [ 2399.718150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2399.759016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2399.762905] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:50:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2399.822308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14131 comm=syz-executor.2 00:50:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xc00e0000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:50:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030006000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:50:36 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x9400, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2399.910900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2399.912836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2399.920191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2399.932779] loop1: detected capacity change from 0 to 1536 [ 2399.938358] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:50:50 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x7000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:50:50 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2413.813763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2413.824678] loop1: detected capacity change from 0 to 1536 [ 2413.826839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2413.829288] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:50:50 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 31) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:50:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:50:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030007000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:50:50 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x94000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:50:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:50:50 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2413.868465] FAULT_INJECTION: forcing a failure. [ 2413.868465] name failslab, interval 1, probability 0, space 0, times 0 [ 2413.870095] CPU: 1 PID: 14161 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2413.871026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2413.872153] Call Trace: [ 2413.872520] dump_stack+0x107/0x167 [ 2413.873024] should_fail.cold+0x5/0xa [ 2413.873476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14166 comm=syz-executor.2 [ 2413.873560] ? __alloc_skb+0x6d/0x5b0 [ 2413.876605] should_failslab+0x5/0x20 [ 2413.877114] kmem_cache_alloc_node+0x55/0x330 [ 2413.877720] __alloc_skb+0x6d/0x5b0 [ 2413.878221] alloc_skb_with_frags+0x92/0x570 [ 2413.878817] sock_alloc_send_pskb+0x7af/0x930 [ 2413.879426] ? sk_alloc+0x350/0x350 [ 2413.879921] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2413.880645] ? lock_chain_count+0x20/0x20 [ 2413.881220] ? lock_chain_count+0x20/0x20 [ 2413.881799] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2413.882504] ? ip_frag_init+0x350/0x350 [ 2413.883049] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2413.883695] ? ip6_mtu+0x1e9/0x3d0 [ 2413.884184] ? ip6_setup_cork+0xfb7/0x1740 [ 2413.884775] ip6_make_skb+0x2df/0x4e0 [ 2413.885288] ? ip_frag_init+0x350/0x350 [ 2413.885819] ? ip_frag_init+0x350/0x350 [ 2413.886386] ? ip6_push_pending_frames+0xf0/0xf0 [ 2413.887030] ? ip6_dst_hoplimit+0x199/0x440 [ 2413.887607] ? lock_downgrade+0x6d0/0x6d0 [ 2413.888185] udpv6_sendmsg+0x2128/0x2b40 [ 2413.888744] ? ip_frag_init+0x350/0x350 [ 2413.889282] ? udp_v6_push_pending_frames+0x360/0x360 [ 2413.889984] ? mark_lock+0xf5/0x2df0 [ 2413.890506] ? lock_acquire+0x197/0x470 [ 2413.891037] ? find_held_lock+0x2c/0x110 [ 2413.891595] ? sock_has_perm+0x1ea/0x280 [ 2413.892154] ? __import_iovec+0x458/0x590 00:50:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030008000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2413.892719] ? udp_v6_push_pending_frames+0x360/0x360 [ 2413.893597] inet6_sendmsg+0x105/0x140 [ 2413.894177] ? inet6_compat_ioctl+0x320/0x320 [ 2413.894782] __sock_sendmsg+0xf2/0x190 [ 2413.895308] ____sys_sendmsg+0x334/0x870 [ 2413.895873] ? sock_write_iter+0x3d0/0x3d0 [ 2413.896450] ? do_recvmmsg+0x6d0/0x6d0 [ 2413.896993] ? __lock_acquire+0x1657/0x5b00 [ 2413.897594] ___sys_sendmsg+0xf3/0x170 [ 2413.898130] ? sendmsg_copy_msghdr+0x160/0x160 [ 2413.898753] ? __fget_files+0x2cf/0x520 [ 2413.899287] ? lock_acquire+0x197/0x470 [ 2413.899832] ? find_held_lock+0x2c/0x110 [ 2413.900380] ? __might_fault+0xd3/0x180 [ 2413.900907] ? lock_downgrade+0x6d0/0x6d0 [ 2413.901489] __sys_sendmmsg+0x195/0x470 [ 2413.902027] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2413.902620] ? lock_downgrade+0x6d0/0x6d0 [ 2413.903183] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2413.903827] ? wait_for_completion_io+0x270/0x270 [ 2413.904539] ? rcu_read_lock_any_held+0x75/0xa0 [ 2413.905162] ? vfs_write+0x354/0xb10 [ 2413.905669] ? fput_many+0x2f/0x1a0 [ 2413.906161] ? ksys_write+0x1a9/0x260 [ 2413.906666] ? __ia32_sys_read+0xb0/0xb0 [ 2413.907208] __x64_sys_sendmmsg+0x99/0x100 [ 2413.907779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2413.908472] do_syscall_64+0x33/0x40 [ 2413.908988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 00:50:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xff000000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2413.908999] RIP: 0033:0x7fb085b27b19 [ 2413.909014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2413.909021] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2413.909034] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2413.909041] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2413.909048] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2413.909054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2413.909061] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2414.002080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2414.030199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:50:50 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 32) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2414.040801] loop1: detected capacity change from 0 to 1536 [ 2414.041657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2414.050701] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:50:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2414.099888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14186 comm=syz-executor.2 00:50:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003000b000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2414.104367] FAULT_INJECTION: forcing a failure. [ 2414.104367] name failslab, interval 1, probability 0, space 0, times 0 [ 2414.105814] CPU: 1 PID: 14189 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2414.106685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2414.107698] Call Trace: [ 2414.108025] dump_stack+0x107/0x167 [ 2414.108479] should_fail.cold+0x5/0xa [ 2414.108958] ? create_object.isra.0+0x3a/0xa30 [ 2414.109513] should_failslab+0x5/0x20 [ 2414.109537] kmem_cache_alloc+0x5b/0x310 [ 2414.110903] ? __is_insn_slot_addr+0x14c/0x290 [ 2414.111456] create_object.isra.0+0x3a/0xa30 [ 2414.111995] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2414.112613] kmem_cache_alloc_node+0x169/0x330 [ 2414.113171] __alloc_skb+0x6d/0x5b0 [ 2414.113627] alloc_skb_with_frags+0x92/0x570 [ 2414.114187] sock_alloc_send_pskb+0x7af/0x930 [ 2414.114747] ? sk_alloc+0x350/0x350 [ 2414.115204] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2414.115836] ? lock_chain_count+0x20/0x20 [ 2414.116342] ? lock_chain_count+0x20/0x20 [ 2414.116845] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2414.117454] ? ip_frag_init+0x350/0x350 [ 2414.117939] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2414.118526] ? ip6_mtu+0x1e9/0x3d0 [ 2414.118956] ? ip6_setup_cork+0xfb7/0x1740 [ 2414.119468] ip6_make_skb+0x2df/0x4e0 [ 2414.119926] ? ip_frag_init+0x350/0x350 [ 2414.120409] ? ip_frag_init+0x350/0x350 [ 2414.120888] ? ip6_push_pending_frames+0xf0/0xf0 [ 2414.121465] ? ip6_dst_hoplimit+0x199/0x440 [ 2414.121987] ? lock_downgrade+0x6d0/0x6d0 [ 2414.122500] udpv6_sendmsg+0x2128/0x2b40 [ 2414.122993] ? ip_frag_init+0x350/0x350 [ 2414.123477] ? udp_v6_push_pending_frames+0x360/0x360 [ 2414.124097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2414.124729] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2414.125389] ? lock_acquire+0x197/0x470 [ 2414.125869] ? find_held_lock+0x2c/0x110 [ 2414.126380] ? sock_has_perm+0x1ea/0x280 [ 2414.126889] ? __import_iovec+0x458/0x590 [ 2414.127388] ? udp_v6_push_pending_frames+0x360/0x360 [ 2414.128011] inet6_sendmsg+0x105/0x140 [ 2414.128477] ? inet6_compat_ioctl+0x320/0x320 [ 2414.129015] __sock_sendmsg+0xf2/0x190 [ 2414.129485] ____sys_sendmsg+0x334/0x870 [ 2414.129971] ? sock_write_iter+0x3d0/0x3d0 [ 2414.130482] ? do_recvmmsg+0x6d0/0x6d0 [ 2414.130950] ? __lock_acquire+0x1657/0x5b00 [ 2414.131472] ___sys_sendmsg+0xf3/0x170 [ 2414.131944] ? sendmsg_copy_msghdr+0x160/0x160 [ 2414.132493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2414.133125] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2414.133665] ? trace_hardirqs_on+0x5b/0x180 [ 2414.134190] ? lock_acquire+0x197/0x470 [ 2414.134666] ? find_held_lock+0x2c/0x110 [ 2414.135158] ? __might_fault+0xd3/0x180 [ 2414.135638] ? lock_downgrade+0x6d0/0x6d0 [ 2414.136147] __sys_sendmmsg+0x195/0x470 [ 2414.136627] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2414.137144] ? lock_downgrade+0x6d0/0x6d0 [ 2414.137648] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2414.138233] ? wait_for_completion_io+0x270/0x270 [ 2414.138813] ? rcu_read_lock_any_held+0x75/0xa0 [ 2414.139367] ? vfs_write+0x354/0xb10 [ 2414.139821] ? fput_many+0x2f/0x1a0 [ 2414.140260] ? ksys_write+0x1a9/0x260 [ 2414.140714] ? __ia32_sys_read+0xb0/0xb0 [ 2414.141198] __x64_sys_sendmmsg+0x99/0x100 [ 2414.141703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2414.142324] do_syscall_64+0x33/0x40 [ 2414.142772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2414.143401] RIP: 0033:0x7fb085b27b19 [ 2414.143846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2414.146041] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2414.146955] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2414.147804] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2414.148652] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2414.149497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2414.150353] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:50:51 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xfffff000, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2414.176813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2414.187004] loop1: detected capacity change from 0 to 1536 00:50:51 executing program 0: getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) [ 2414.216464] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2414.256633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:50:51 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0xffffff7f, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2414.280336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:51:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:51:06 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2429.345866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:51:06 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:51:06 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000401ee96b408772ec1694000000c009900000009000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x48850) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000280)={0x1, 0x2}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x7a}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) 00:51:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:51:06 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 33) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:51:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030018000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:51:06 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x8}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2429.378763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14223 comm=syz-executor.2 [ 2429.390976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2429.402183] FAULT_INJECTION: forcing a failure. [ 2429.402183] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.404370] CPU: 0 PID: 14226 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2429.405386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.406602] Call Trace: [ 2429.406821] loop1: detected capacity change from 0 to 1536 [ 2429.406995] dump_stack+0x107/0x167 [ 2429.408794] should_fail.cold+0x5/0xa [ 2429.409343] ? create_object.isra.0+0x3a/0xa30 [ 2429.410000] should_failslab+0x5/0x20 [ 2429.410552] kmem_cache_alloc+0x5b/0x310 [ 2429.411129] ? __is_insn_slot_addr+0x14c/0x290 [ 2429.411781] create_object.isra.0+0x3a/0xa30 [ 2429.412401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2429.413123] kmem_cache_alloc_node+0x169/0x330 [ 2429.413783] __alloc_skb+0x6d/0x5b0 [ 2429.414321] alloc_skb_with_frags+0x92/0x570 [ 2429.414952] sock_alloc_send_pskb+0x7af/0x930 [ 2429.415600] ? sk_alloc+0x350/0x350 [ 2429.416129] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2429.416921] ? lock_chain_count+0x20/0x20 [ 2429.417548] ? lock_chain_count+0x20/0x20 [ 2429.418170] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2429.418935] ? ip_frag_init+0x350/0x350 [ 2429.419533] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2429.420256] ? ip6_mtu+0x1e9/0x3d0 [ 2429.420317] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2429.420780] ? ip6_setup_cork+0xfb7/0x1740 [ 2429.420801] ip6_make_skb+0x2df/0x4e0 [ 2429.420822] ? ip_frag_init+0x350/0x350 [ 2429.424441] ? ip_frag_init+0x350/0x350 [ 2429.425038] ? ip6_push_pending_frames+0xf0/0xf0 [ 2429.425745] ? ip6_dst_hoplimit+0x199/0x440 [ 2429.426393] ? lock_downgrade+0x6d0/0x6d0 [ 2429.427019] udpv6_sendmsg+0x2128/0x2b40 [ 2429.427636] ? ip_frag_init+0x350/0x350 [ 2429.428260] ? udp_v6_push_pending_frames+0x360/0x360 [ 2429.429076] ? lock_acquire+0x197/0x470 [ 2429.429685] ? find_held_lock+0x2c/0x110 [ 2429.430314] ? sock_has_perm+0x1ea/0x280 [ 2429.430947] ? __import_iovec+0x458/0x590 [ 2429.431566] ? udp_v6_push_pending_frames+0x360/0x360 [ 2429.432334] inet6_sendmsg+0x105/0x140 [ 2429.432913] ? inet6_compat_ioctl+0x320/0x320 [ 2429.433585] __sock_sendmsg+0xf2/0x190 [ 2429.434167] ____sys_sendmsg+0x334/0x870 [ 2429.434800] ? sock_write_iter+0x3d0/0x3d0 [ 2429.435426] ? do_recvmmsg+0x6d0/0x6d0 [ 2429.436014] ? __lock_acquire+0x1657/0x5b00 [ 2429.436665] ___sys_sendmsg+0xf3/0x170 [ 2429.437246] ? sendmsg_copy_msghdr+0x160/0x160 [ 2429.437926] ? __fget_files+0x2cf/0x520 [ 2429.438531] ? lock_acquire+0x197/0x470 [ 2429.439132] ? find_held_lock+0x2c/0x110 [ 2429.439737] ? __might_fault+0xd3/0x180 [ 2429.440332] ? lock_downgrade+0x6d0/0x6d0 [ 2429.440961] __sys_sendmmsg+0x195/0x470 [ 2429.441557] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2429.442191] ? lock_downgrade+0x6d0/0x6d0 [ 2429.442830] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2429.443536] ? wait_for_completion_io+0x270/0x270 [ 2429.444252] ? rcu_read_lock_any_held+0x75/0xa0 [ 2429.444939] ? vfs_write+0x354/0xb10 [ 2429.445484] ? fput_many+0x2f/0x1a0 [ 2429.446026] ? ksys_write+0x1a9/0x260 [ 2429.446597] ? __ia32_sys_read+0xb0/0xb0 [ 2429.447201] __x64_sys_sendmmsg+0x99/0x100 [ 2429.447823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2429.448590] do_syscall_64+0x33/0x40 [ 2429.449140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2429.449891] RIP: 0033:0x7fb085b27b19 [ 2429.450450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2429.453146] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2429.454280] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2429.455340] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2429.456384] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2429.457441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2429.458497] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:51:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003001c000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:51:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2429.505903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:51:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x0, 0x0, 0x0, 0x1, 0x2000000000000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xbe190f6}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x2, 0x7f, 0x3, 0x0, 0x8000, 0x84, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffff8, 0xffffffff}, 0x800, 0x9, 0x1, 0x7, 0x3, 0x8, 0x8, 0x0, 0x2, 0x0, 0x100}, 0xffffffffffffffff, 0x6, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = io_uring_setup(0x7ed5, &(0x7f0000000040)={0x0, 0xd768, 0x20, 0x0, 0x287}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x20010, r3, 0x8000000) r4 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x1d, 0xc21}, 0x14}}, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='\\)\x00') [ 2429.546448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2429.546986] loop1: detected capacity change from 0 to 1536 [ 2429.559349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2429.573378] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:51:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:51:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030063000000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:51:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2429.668022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14253 comm=syz-executor.2 [ 2429.708259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:51:06 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x700}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2429.762365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:51:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x8801) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab06096a31e3fce28aa48546"], 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) connect$inet6(r3, &(0x7f0000000400)={0xa, 0x4e22, 0x9, @local, 0x42}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000038ef68c15698b3bb63fbac4bf3c37a6488128907b76426284b56935278eaa0209fb3254ea4c502f9124837aa5114a95564b1bddfe3bc9ca7c33ca240f6d2b8a63cd3c355f5ba475b727e19ea505d7866a0ac3992b28ade59c372bac915bb3ddedfdf4580627785706b2ac2f17c2e0a9fb428f6ddb5dad51c8270bbe8dce44c90dcee2a666f1c928852f2", @ANYRES16=r5, @ANYBLOB="01010000000000000000550000000c0099000000000000000000"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="01804208", @ANYRES16=r5, @ANYBLOB="000229bd7000ffdbdf2507000000080001006500000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000200000047000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) faccessat2(r7, 0x0, 0x128, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdec791, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="09012bbd70008a4f2f56e17573a11420941f6d52584bc7c080652b92deda", @ANYRES32=0x0, @ANYBLOB="08006b006e00000008006b006801000008006b008800000008006b00e001000008006b00e001000008006b005a00000008006b00b4000000"], 0x54}, 0x1, 0x0, 0x0, 0xc810}, 0x4000880) 00:51:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2429.864479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2429.866220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2429.868334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2429.882623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2429.885956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:51:21 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:51:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:51:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000030000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:51:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f0000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:51:21 executing program 0: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r0, 0x0, 0xb) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0xf747, 0x8]) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000002c0)=""/72) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0x52e5, 0x1000}, {0x4, 0x40, 0x1800}, {0x4, 0xffd1}], 0x3, &(0x7f0000000180)={r1, r2+60000000}) r3 = semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0x4a41, 0x800}, {0x0, 0x0, 0x1c00}, {0x1, 0x400, 0xc00}], 0x3, &(0x7f0000000200)={0x0, 0x3938700}) semtimedop(r3, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r3, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}], 0x3) semctl$IPC_RMID(0x0, 0x0, 0x0) unshare(0x48020200) 00:51:21 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 34) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:51:21 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x20000081}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:51:21 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x9000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2445.067252] loop1: detected capacity change from 0 to 1536 [ 2445.087786] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2445.101805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14299 comm=syz-executor.2 00:51:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2445.148828] FAULT_INJECTION: forcing a failure. [ 2445.148828] name failslab, interval 1, probability 0, space 0, times 0 [ 2445.151880] CPU: 0 PID: 14297 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2445.153457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2445.155337] Call Trace: [ 2445.155933] dump_stack+0x107/0x167 [ 2445.156763] should_fail.cold+0x5/0xa [ 2445.157624] ? create_object.isra.0+0x3a/0xa30 [ 2445.158657] should_failslab+0x5/0x20 [ 2445.159518] kmem_cache_alloc+0x5b/0x310 [ 2445.160444] create_object.isra.0+0x3a/0xa30 [ 2445.161426] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2445.162700] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2445.163835] ? alloc_skb_with_frags+0x92/0x570 [ 2445.164860] __alloc_skb+0xb1/0x5b0 [ 2445.165671] alloc_skb_with_frags+0x92/0x570 [ 2445.166680] sock_alloc_send_pskb+0x7af/0x930 [ 2445.167689] ? sk_alloc+0x350/0x350 [ 2445.168496] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2445.169660] ? lock_chain_count+0x20/0x20 [ 2445.170604] ? lock_chain_count+0x20/0x20 [ 2445.171526] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2445.172665] ? ip_frag_init+0x350/0x350 [ 2445.173575] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2445.174663] ? ip6_mtu+0x1e9/0x3d0 [ 2445.175451] ? ip6_setup_cork+0xfb7/0x1740 [ 2445.176402] ip6_make_skb+0x2df/0x4e0 [ 2445.177241] ? ip_frag_init+0x350/0x350 [ 2445.178137] ? ip_frag_init+0x350/0x350 [ 2445.179037] ? ip6_push_pending_frames+0xf0/0xf0 [ 2445.180106] ? ip6_dst_hoplimit+0x199/0x440 [ 2445.181063] ? lock_downgrade+0x6d0/0x6d0 [ 2445.182011] udpv6_sendmsg+0x2128/0x2b40 [ 2445.182924] ? ip_frag_init+0x350/0x350 [ 2445.183829] ? udp_v6_push_pending_frames+0x360/0x360 [ 2445.184983] ? perf_event_task_disable+0x390/0x390 [ 2445.186064] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2445.187164] ? lock_acquire+0x197/0x470 [ 2445.188049] ? find_held_lock+0x2c/0x110 [ 2445.188960] ? sock_has_perm+0x1ea/0x280 [ 2445.189880] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2445.191119] ? udp_v6_push_pending_frames+0x360/0x360 [ 2445.192262] inet6_sendmsg+0x105/0x140 [ 2445.193129] ? inet6_compat_ioctl+0x320/0x320 [ 2445.194141] __sock_sendmsg+0xf2/0x190 [ 2445.195018] ____sys_sendmsg+0x334/0x870 [ 2445.195940] ? trace_hardirqs_on+0x5b/0x180 [ 2445.196904] ? sock_write_iter+0x3d0/0x3d0 [ 2445.197847] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2445.199060] ? ___sys_sendmsg+0xd2/0x170 [ 2445.199965] ___sys_sendmsg+0xf3/0x170 [ 2445.200827] ? sendmsg_copy_msghdr+0x160/0x160 [ 2445.201856] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2445.202855] ? _raw_spin_unlock_irq+0x27/0x30 [ 2445.203866] ? finish_task_switch+0x126/0x5d0 [ 2445.204853] ? finish_task_switch+0xef/0x5d0 [ 2445.205841] ? __switch_to+0x572/0xf70 [ 2445.206711] ? __switch_to_asm+0x3a/0x60 [ 2445.207616] ? __switch_to_asm+0x34/0x60 [ 2445.208532] ? __schedule+0x82c/0x1ea0 [ 2445.209403] ? io_schedule_timeout+0x140/0x140 [ 2445.210422] __sys_sendmmsg+0x195/0x470 [ 2445.211321] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2445.212296] ? lock_downgrade+0x6d0/0x6d0 [ 2445.213228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2445.214297] ? wait_for_completion_io+0x270/0x270 [ 2445.215378] ? rcu_read_lock_any_held+0x75/0xa0 [ 2445.216424] ? vfs_write+0x354/0xb10 [ 2445.217247] ? fput_many+0x2f/0x1a0 [ 2445.218049] ? ksys_write+0x1a9/0x260 [ 2445.218902] ? __ia32_sys_read+0xb0/0xb0 [ 2445.219806] __x64_sys_sendmmsg+0x99/0x100 [ 2445.220763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2445.221916] do_syscall_64+0x33/0x40 [ 2445.222762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2445.223917] RIP: 0033:0x7fb085b27b19 [ 2445.224754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2445.228844] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2445.230542] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2445.232127] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2445.233722] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2445.235333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2445.236938] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:51:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030080040000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2445.311527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:51:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="250000001200215f0000000070e600000a"], 0x24}}, 0x0) 00:51:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$packet(0x11, 0x6, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003b40)={'ip6_vti0\x00', &(0x7f0000003ac0)={'sit0\x00', 0x0, 0x4, 0x0, 0xff, 0x8001, 0x0, @loopback, @empty, 0x8000, 0x8000, 0xfffffff7, 0x3}}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "cfa98c3ece6dc40347f12fbdeb368344cc735ce225980f7f16dca282ace531ac3f19ecff1509353474751a6101f42b47ee8e9db726c31ebda718bb2d2e067921"}, 0x46, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x3, @empty, 0x3ff}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000180)="586af8963bb690b0c2b77baaa48c31c10c86fcf34c2ba137b51711472f2963be98a412d8f5f3140a254b3ddc14975094b2a68950c42ba3974de5a5bf4644bc30ca21696eb508ba8b03f8d419226c28851d5984efb8001c065a3a190613c417eefa7dcc55cea1273e7b0ac82d0ab930798e166699", 0x74}, {&(0x7f0000000100)="8ec5c9bbf0547c82cda18143ca4e46c1c1d8", 0x12}, {&(0x7f0000000200)="023f21e177389634bbcb98642c2ef79bb3a8eafe2127da948a3fdb8e4ead741503876b339385f097d8a6e1fe172d8ee4f5c0ba037b24f3dd0039224281d1c145a2694f28", 0x44}, {&(0x7f0000000280)="92de4404e49617aa85f1512da24875", 0xf}, {&(0x7f0000000340)="52aa87bd993918da620bdb1f7fa1f9f3c4b5f2de4cdb530e7b890586121b616921c6d660492c320aef965c8728688b22700801992853929b66a0566676b838830edc205b2d4c0428155d4f77575adeee224ba3b7af9b6c27dc57d0f9dd39672ba913e2437b33c0119c2532a46b368a02d5760ce4d2ca58a3460d9df483776c1056d7b6ce0f2868a91c7def3a0f1c4e2643a8af9455e63a02823db302f3827051829641069bb4060a249edfea07e881471e1cd69211a1e10659d8d49cdb33427fae8f13c9b54080a36b0c11276d7d6ee6032a7caeed609963a84d6d2ca5ce2841", 0xe0}], 0x5, &(0x7f0000000580)=[@hopopts={{0x2b8, 0x29, 0x36, {0x6, 0x53, '\x00', [@hao={0xc9, 0x10, @mcast1}, @generic={0x0, 0xe9, "bda5849b98249684f1a6287c2fa27c4b36c4e418a3dc0bfb0be8c4bff50de8659c787f993cda914b8baa64ea70f2bf929275d230c4565f220883d64a460612663d3857997a0c28e5d91a91fc2b6bea70e872e2842042f5a6445b015104162909012ef7ce977747f0ea773925f1db4ddb6f27e53046e7285760df38f51bc5cc0004643a38c6117e9c9c027141938639c45f7d6ee5d5071a24f076c398b18d8dcde05657910cda16944de812423b4ecdfbd232fbd15217ef5a8b43469bf519e327ab5afb4bc655680153769e8a01aa1fce672ac44e2fdef62d20caec439cb5e94de2bb5445bb59078ef4"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, @hao={0xc9, 0x10, @local}, @generic={0x6, 0xb8, "e48d6201a7c4bd799bce1b2662f31593ceaa42d2788c02a2fd33d6a073039b835b95d9b27c0704706d163c22830acc6f09ed20766b93eac8d18316e6840f6c8987e42883dac1e8a38b50f46cf8d5010f01021b6e6333b1c38b6bb03a3b53fc8bd3c243190859da7396c792e46bfddae4b99ab7c23661ba4c6e3b73c2495abcf226152d366f29ce2298a6042825e149941f6118f119d4862c6e91dc28f9d174d2e8ba19e47e6dee5c516def2cd6348ddf057d963e59d72923"}, @generic={0x0, 0xae, "d75c5f5a6c6c9771f8fad437dd7873010e8ff298bfce0b5cccd279a58cda421b5283f8764a6470c3ab9416ab43e990b8bdd6fb6db21ded904723cf070490abac95be1b0a16755867269026c17051cef9b44af52f4308009d911676025da51082285c83ebc375e39914ca6ab14486772d173248f673152455729d12e56464adc557c385cc6d3a441041720fe4ac047b1b47724589ac1f72e57e277df71de928777d5b38c7ff87060fbdbf975475fa"}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@ra={0x5, 0x2, 0x9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hoplimit_2292={{0x14}}, @hopopts={{0x30, 0x29, 0x36, {0x87, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @hopopts_2292={{0x120, 0x29, 0x36, {0x62, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1f, 0xe4, "364c3ce52851c810dbba75a57c6f9fbf517b71adcce88ab67ad861c495a433a8ef9497d7a91e0bfa3ad3ee7007a4a31376f0c3ef68258ccfa820634fcddc714bd93fe1ffbd8524de85b9a82d68846f0480a2af134d9f85c490bc6a7605623baecf27e49c5ffb52781983b220f49237df93bf3641eea142c66b763f3f3f09303da0a2be2dfe5395b9d39ea96361c6a94530f731510e7ab86545add3f0003681eb2f1961199389e233ffd5d4473171dcec804d42a35910ffbc46289d0a3f8c8aa90cf19537c87996b4bc7acb22b7cab8b6a282fb44f4009b4bfa8897c37b1cdec2889d855d"}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x4a04}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3e}}, @dontfrag={{0x14}}], 0x4a8}}, {{&(0x7f0000000a40)={0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000000a80)="dd29eb2d8dee33f627a57cdd90059734be7355419599bffc8a689f199cebe089db2bcf8108cdebe93a995eb8633947ce3bcbcd9d472f0dd5f21303e4034fe78640ad93154d36a2823e4e5d21ef17d6e39dd334a8a45fc215d3fc61080b1c71eeffee03b20d64c31b30bc954964ed89a4afccdcd1b74e02168e0b538fcf0c5b804e56f16900fe35e1ba274d2361b7e965599da87b55dad16a6182977ef504184f320e6e02f750a04969932818ca13618023259e7377a3d9be3fa7aee605713e38db1f2b53b56760a8a1c5f30e7f5405febf2d1f3598823262be75c0", 0xdb}, {&(0x7f0000000b80)="2d079b2a37b53f3f19c8e1e3a4bb87fd20fe3d3de6bc393bf8e858915b7b2c9ce2b6369ff9499d6fd5ef2c16c7241686fc2bd594435aa54c373f878773d541de8a671ef56b5db35630e54dd89ca42170e657c3f2a6a234f5aa65e722383ba24b4afbe520011ad92c575f9e02eebe59a8cb5726ffff0e86fa038b0df4c93682b4ac7b1646c2c9407b08e121cd3734f67b2316921265f475fdcde8a80064b5adb4ba6615faa61bb2b60b873b6d910c38fc75dff053d79318134cd5667fb70a8ed7bc4ba1086dcf60f13accbdda9c1b3015f8aa8612a22d39383e428b30ff9e5809536ab160c54132a4a22d53f87a4c8f68d204e2215022840676db61070ba0e16f553b80ab5c3996b115bb45f1759560746e9ee388ab85f8e3982ac79e2acd59923cac88e749d8527003717f0c4ed6474f53ac6fec417b44e264d68a78104fbcda021909971ce1e0038f91b9a06f26562907cf1fabb6b25a92109c0cad27d3c598a71380c0958d26221ddbdc72de995ba53db5886f9bfff9f97d7e8b4bcc64319183a980122d8cfcbaf12a308ad15a3b1ae86bef6c875863ff779349c1e7d41fd705ff4161936dc161e7088207b9c7eff583f631e297ed4ac08cfe9a3f51945b2083b58c836924caba968a23c4a0a72164bb591fd6b0112f22060ec91ee2a737a104f79989c4af92fd546ffe207a648be1ad02378d317d8f35ba3139a7884959ebe9215bd38b5021b9e73002ae2b6c57cbd5afd92827b114681b773edc6f6a9a79c3a1ac518aa2d5992c02beefb6f4e1ba1260d1265bc17b2b2f42192df3534785882fcb9a40f6e2a58b059c7d8690a4c1d9c24629cdb46312654d067a2d9c648430a3fa5761f6f1735af27fb169aed0e596e550677dcec81e0b756d38ed0b353d5c735581b8396fcfe9aa95526fe2eb2dbc593dc46dd2d833fa78b2a3601238c58206605aca3baf93e5c46be6650844062fc8f2e804c8626cc7cf2bba425b133af0691632fd711aa21f2a0089fdaa3d2777a9b48c92f01fce45a37fecfa235bcee0d19fe19ff08c370328db0053d9235bb89609fe7e3aad60e5fc7063d627194647c2fddda9e4349bbdf69ecbb3c046cecada753367a4646e8f4eafbab8b944141777b746f887a34e34d851daf8a080922449b34e7fc4da13dbb832bd8e0efe3425c4c097678d651d59833b937a83bc1a8a6a511bbdc4fc5981ec0ca71d6800f9fd596da362636679cdaa3e7b0f8d10d222132ba5dc59d98a9e2190aa7ec3410d911ecc9a3fcf3fcc908a82bb0e345b88e9cb6096fdfd1cd3a57322a5a22bbded46c6f05aa54dd567c5b31921cab63c3f95a2b2170d24cdbf2ff17292b92ba1ec19af8887752aea7f48a3410a539d0150ef79d8b232f66b9821ab76ccee2e3cc0d0f7bce1188eaa11f8762d5046363e433ad03e273a02f004cb4de9c3d473b1285bfaf89d6c3f9b94696803292bc51d9c3d78a595caf3a5c0995835ef600fe1c983575ede58315ffaf8b2125061da1eff6e364d685727a9aa5cfef734823042848abed378fe11c12f82dad9ac2219f0ac365c51f214f6c3204f932ac4ddd36ea53be63ddc6bde7ee489839b37147533d5a9d682945576cb81f00c87aee5aa07d373cf65b547b1f3068c5c11479f5f7e546d6345275bbbfb6e0ea9b7750f56bae3b8b566a08de0a3a7d941f1a93646ed96af8defbe0f085f3ab4cb2d46bd2e3a6de28ff9130eff9828b1afa3dc418a1038d16a1606563e49f5f5b5dc2e1689da5ec444fb91eba2c65442b6fee6afd95cf8190ebc29b4f0c2a58aaa1a8d637ffcc04a9b2a0862e996d6c936344fcc1979e0f14ee2fc66ceab6363942246853eff0e0553aba206e496c5eb99e1339a9d36587338e3f0ce77ffa59d779f0d74bca9fed00e18ed59e45fadd238fe4a0ea68bfa1a94bc51b2ab72a62bf33dafd43b60386e3439fad649918016ed5edd8523a23980b019a580d04c0d32393e54f158894a4d601c7a1bf8c5005a42e77f4e663d2c1d271ee47a22c4cebfbe1a9f569d94a3182efaacb5c1d954f14a3d31f9cb70444d09d123658a392494e6e90f113640eaf01c30522175812de4f3463dd4ce015d800e34d56de789374a425921a08298a2579d0556d5950ada807771ea637112c42925dbf88f08756bc7655ca0126cc6a2bf0a68617689588758a4cce5449fbf9163fcb3382d30a9c5c83cc9ee7a6d0592907ad55827504ef306a49f76e3878fef87de05de99717cb7706166cf62d65d07502f1afc7f7989f81bcbc8e643b200e4cf0f3552ef49e92afabbfbd3bdbfcfe7f4133228914e40db0f2f1d6875f1d89db114c904ee7c092ad84bddbeec66ec2591de8f71d6e0ca45c045899f2f0f57f8819ac874a1c5a322fe51766aaf90eac7eaf19f1cf63b5147a8986b3cb94749cb006a200fa378e128e71b0e1a056771ab2a8be53d02e46ec2a82f1efd84440ce9c072b085c9edf771396ca22ce7dca2752ce5c47c8660ee15935b89f9811ed706059cc56112d003198337ed81401d54ca7a8fc568d833b04fadb80f92e7ff03762faec87869d6c40d5286eb89137f0da2215c0fc137c6595a746b180a788aa5d6fda7802c96704644a9e3d3b5ffbee554348270f1805fc5bf6d6f4715a8becf77150c59ceed411e13a335592c653f734a80f917983c8520b3602f0ac7ed36a0c035d70f98f73cb1a36f3176a2a774ffdef15db7d0e98541f4c4b97f775b23be605e75ce5ee8d68568bd5f52fe5cd90e2806998721590172765afd9b85103b8b055ca74351c868e27d3ae6483f781a80b8ff3a65f75835f8f81645f9933ea7a1f15c4330660d4ef1a1fce6840f550e8f594addeccc7e8eee51b421ebf1922508bf9c4bca3e9e4b2eadd4aefbdf9615c2f034ff497a22eb24f563c169e64cb162a2d34bb32bf21157443597c720c828e9f3926001eaedeb03a80199c3c05815dd8db056327da9c1fda49dce8db88d112cfd7403fd55c1a04ac7bb1bcd372611830f7a0f7b00f9f6cb8d25c91059826f618e827d6dd05745c977b86f1a9ecc25d1d747333145c9e54be8ef291d8535f3c9303b0b2f37e94630b8480ea8592a376386bdf63c5041663db2562a88e14eb92a0e9079724dd772cfa034864696b15dbddd373beb776b422b6d3256d15844e02280188ecfd49f0843f1ad574fbe3050b731ccc93f5373625fd144f304e5f92bcd33cfebb40746d794b2e68686b31ead0610f312528e9121b0eda22b8b9b827cecf3b13c67c079f093d7463feab426e0e1c25a550fedf304140c1072dc6e4ebe5d8c2eb988b50f61d4ff7454944c65d411aa6643e5cad8e55d3d15a3c5ab9cfa8b0a7374d2b9dd97d7900026c70fd76417329939641025c5bacefea99d0e557bdbfe9f3f785333a9457945345cf85985e5913d4af6d7a61b521cfda3f92e1ed9c7f23457f5690b2340c0540834950fdbcac6d7bb37c6a7308ada9b1cc4a7180f8c97092de8bcb00726aa219e40319f1d303f1be9475f8ff68673d68eb2acd524a83ed64fd428fd8cf58c9c3c1ebf8ee4a157572826c71150acb32223faf732302ea98f849928d9b456248ac36a5f09b88b2ba89e499ddecc4052123984e38c2cd50caa7b34ab8f04980beb3eb09cd60d82489af48d30285b6dcebe8f7f63cea699e0fdbf4d6722ecfd2a5209061a16f0b0b9d05e1f96040102d0e6f863ea5af52d5b88530f6359c636115f009557d0a5ba27553eb271050c44ab3efb055e2599544b31e3b487fc4aba1e8f6890eac0b71daf49526b6b658bee7b100d552420437978f13f35e3c2aac453b5c1635144fb66774966d49e2a09c7dd8ee1c0c1a63cd83ec9d510f967f2f746f66853eab99c1e06a7842ee1b37c944b7432f8c2a100acb2bd88b99fa4586e3ee2f02c7ed1a6fcef7108949e0d4874e5b6bac254b25715dc6387600f0d4208f5c2cb7d252e96b7eb9fcbd4db8f1667ad4e13a4b91833c71ba41aec2110ae6c74d858cf35404a0a0c4895f2a0eebb72ca62bd96f47cf98d9bd76ac92d396c4c1b260d4dafb386d866a93c13c0c982bd421d56ef0045e32380a58566666d98b3e9566cab82976106216edae1a1850ab4d93cea9b17d4bd996b63bdfe2b6298e48beb29b02c3f065cafa141d0a78c1056cb906cd7dfa81d444c68d2077acc398b62cfa459baf931ede0bbd7090dc820e8daf77a6c004ccf05daec1b20b135029ac70356f09826be6e72782ee536bf21c0f6f09377a966949abd461fd8628bf9f5da80d12a51488692eafdb36060bbf7746be1dc1f4b57999930466672a0c14d08c8edea4fd12f7c1eec979b4d0740981ca41286729634bb2ec019878885e2b5c1884b8e4544d64973e204ec7a7b18962142038a04a55ae888e05c1dbdef2ce4470f07817c25d91d51e5c4fd32db7ee6206f3e200480e0e22f68ea4364ec7520a6480588b6f8b8d10ecc1eef234532aeeac522db4f38af6c6eb09ca38671a61d169f17ed87722457063360f1ed2687d066a21a6a8d7fd3d8e6596feea9f393893ba9d59686edd058d615aa88680b7bce0a715b338fb4b0278d7633cb3b63d4ff3147da8cd23da506f75b189e8d25bd7aaed9c309b515317b0aa0562cb5e280793f505e807d37608344e410b18a3ded7a7405e8d5f64a94c2fe83293297230a804b292c442e6346be10e2961a049da9882a97aaaeacf60e08bae8c2a894b5f937de130d66712b3253c1d54547693b01770036bb4451e64583fc306bbe8c1ed486d403332f09d64c56d7fae9f1bbcb38a0c9fdc9c9d52e7deefab46d240d3f1d87dce23abb46331697cecf33be1ef303dccef55baa41cf2c80ecb3e70a1033f39f23c31df2109082b979b7468e43742c18e7785dade2036bb2f3dd9d2a1e2793d4eb8cb0681a4105ab3e909682af737551cb58ffc597ccd0f3d87c9b11efd6a42fb761de06b62616b648fc50156dc06d89d86e3276a3a6fa3e715a1817caf0bea10599037335f41c8e2babe127d442f2d745d0bc35602555a5cfacb7182c577778dc44aa4290ef7c82a2ba5a32406043f35a43a499447a324c99fdfeb7cb3a9f44502eed9b46d3b47d7a3317a8df53d6ba2dcea6840fd7c0cd1108f51da9f534f6528107e595996dd76df9e4cc1e471648f2b5e0527b606fe5861d605c917d194069b7e8199b04ab9bdb914fba2c4dd83a2bee69ad517aef4457e857bc4301a9c4651984a1ef18189f63f1a0618629c914e2264d22986b780a9ad6d4047e6f597428eef9d9d3bb21bc98b7dbd0059c0db3432aadb5e8fa23351328d4fa6f25931c99d1e1b6be509ddfc0f76bbe5722848ff4da3c2e3f66938466e59fd78613de8329ef5bb9e9c8fd0072d24c063d51c02444200490f208cc03e79a9a8b1a68cb2d801b674323307e2bba7a351f23a72582ea38783af640170af9d58595951560753b35cf76d6ea8029a7b29b8cdc89b44d1d1338a3b0784ebe1ed05fcc8a5fcd160b8c4f23bc705b04b121b9805b976fa9fc3a57fd302a5c6b5a962c7cef29c861721ffa0eb6c11f80c81d3865f93b0644d814659510a90c65849d3ae36f2685b64d3854dbd984cdb11a9d30c0f74579aafa215dd687349b14d0ceaf2c805ab09e18165657f8e4c2500484c790cfb6102372f1b8ce0850aa1b7005dce80f2324e9967ee5f3e8fe92f20547e7f3ee72026112f57c2385ead08a93a7027cf24ac1a85212cd4dbec1200d3bac74e34cb32cc6fc869d3dbd547af0dd10fc6b2dd125abb1f4881fd1f8b40b937d1d49fe90b9978680e1fe0ff32457a855", 0x1000}, {&(0x7f0000001b80)="c8d7dde3c93e2f600cf65f064aeaf256039e38e46eac731dd029f284c0c9667c9a2bbae720866d97cd067a6a00f7340f7c3713e6c8c2af4911152bb16839e6d7d3104ceda77ce7edacadfe26b5c96ddc331d23a517b83f88e80eb87dc7d4049f997f5672c5afac68c42787999b45193746e1b285f4bd64b39951dfb910badab52c3ccb2b0206f370f40b090eb49ace7496a3a254f869d1b868ca496e65e0580de8f77ada5b0a53d3b3ec85adc0c00836e85e4fd8002b376ed743e9da5c032bf49737687b96966c3b9e8a337b330888a5bc5fa4cea03565b836ccbae30fb0f253a52854b4f65f70f9df1112a8b8e002073b8469d55ea9", 0xf6}], 0x3, &(0x7f0000001cc0)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x5e, 0xe, 0x2, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @empty, @mcast1, @remote, @remote, @empty, @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0xa0}}, {{&(0x7f0000001e00)={0xa, 0x4e24, 0x1, @remote, 0x603d8000}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001e40)="dbaab82e4e0be5e0c83dd0a6e6885d8dfd55fa8466e1732804b6a6d3ab4b5f823ca85859748e8f2a0912b56b1953b18d54e69d6aaa695f24b7834558f868d079045cec3ed4177ad40e9e03007391167125d538068200361ecc60669f3a3089f83df816c14e071f92d7e89366a6cbda94132ccf8e3ff01afce0197023e8a42f2fbb9eac872cdb04bc3c895e870a1cfa706e423289d96d1ea0d7b25a01", 0x9c}, {&(0x7f0000001f00)="e3555a77ba24f72e4a7a87d13faa9f80a964c89a466cc468c0a3fb821885a1f0262b241ae7bb52926face8330f1a5b67ff70f4bf48e68bbc8a1f37668b508f062e0823aade856db53fb502cc09b98a6d2532fa824ec57de5eab60cafabc13bf4d8dde87063620c82712a6f636c314d89a256723139104c1bd8041fe526330a7e2564da38c3c39542", 0x88}], 0x2, &(0x7f0000002000)=[@hopopts={{0x50, 0x29, 0x36, {0x87, 0x6, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0xe329, [0x9, 0xee]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x9, [0x3f]}}, @pad1, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x200}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x87, 0x6, 0x1, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdr={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x1, 0x20, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}], 0x158}}], 0x3, 0x44001) 00:51:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000050000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:51:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:51:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5f0000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2445.495546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14329 comm=syz-executor.2 [ 2445.497180] loop1: detected capacity change from 0 to 1536 [ 2445.534960] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2445.548045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:51:22 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x7ffff000}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:51:35 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:51:35 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:51:35 executing program 0: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/103) socketpair(0x0, 0x8000b, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xb91d57e5c228bbd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:51:35 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 35) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:51:35 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x8}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:51:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:51:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000060000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:51:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2458.839628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14355 comm=syz-executor.2 [ 2458.853796] loop1: detected capacity change from 0 to 1536 [ 2458.863801] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:51:35 executing program 0: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2458.920190] FAULT_INJECTION: forcing a failure. [ 2458.920190] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.922774] CPU: 1 PID: 14364 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2458.924293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.926102] Call Trace: [ 2458.926694] dump_stack+0x107/0x167 [ 2458.927490] should_fail.cold+0x5/0xa [ 2458.928321] ? __alloc_skb+0x6d/0x5b0 [ 2458.929155] should_failslab+0x5/0x20 [ 2458.929985] kmem_cache_alloc_node+0x55/0x330 [ 2458.930985] ? fib6_table_lookup+0x636/0xaf0 [ 2458.931943] __alloc_skb+0x6d/0x5b0 [ 2458.932744] alloc_skb_with_frags+0x92/0x570 [ 2458.933706] ? mark_lock+0xf5/0x2df0 [ 2458.934523] ? mark_lock+0xf5/0x2df0 [ 2458.935348] sock_alloc_send_pskb+0x7af/0x930 [ 2458.936336] ? sk_alloc+0x350/0x350 [ 2458.937141] ? find_held_lock+0x2c/0x110 [ 2458.938025] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2458.939210] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2458.940311] ? rawv6_exit+0x20/0x20 [ 2458.941126] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2458.942165] ? ip6_mtu+0x1e9/0x3d0 [ 2458.942945] ? ip6_setup_cork+0xfb7/0x1740 [ 2458.943416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2458.943877] ip6_append_data+0x1e6/0x330 [ 2458.943893] ? rawv6_exit+0x20/0x20 [ 2458.943915] ? rawv6_exit+0x20/0x20 [ 2458.943940] icmp6_send+0x1250/0x1f30 [ 2458.943979] ? icmpv6_push_pending_frames+0x470/0x470 [ 2458.943999] ? find_held_lock+0x2c/0x110 [ 2458.944052] ? ip6_dst_hoplimit+0x440/0x440 [ 2458.944081] ip6_pkt_drop+0x3d2/0x7f0 [ 2458.944102] ? ip6_pkt_discard+0x20/0x20 [ 2458.944126] ip6_local_out+0x29f/0x4c0 [ 2458.954483] ip6_send_skb+0x117/0x460 [ 2458.955321] udp_v6_send_skb+0x7b7/0x1620 [ 2458.956234] udpv6_sendmsg+0x216b/0x2b40 [ 2458.957120] ? ip_frag_init+0x350/0x350 [ 2458.957997] ? udp_v6_push_pending_frames+0x360/0x360 [ 2458.959146] ? lock_acquire+0x197/0x470 [ 2458.960008] ? find_held_lock+0x2c/0x110 [ 2458.960909] ? sock_has_perm+0x1ea/0x280 [ 2458.961818] ? __import_iovec+0x458/0x590 [ 2458.962734] ? udp_v6_push_pending_frames+0x360/0x360 [ 2458.963858] inet6_sendmsg+0x105/0x140 [ 2458.964705] ? inet6_compat_ioctl+0x320/0x320 [ 2458.965675] __sock_sendmsg+0xf2/0x190 [ 2458.966519] ____sys_sendmsg+0x334/0x870 [ 2458.967417] ? sock_write_iter+0x3d0/0x3d0 [ 2458.968334] ? do_recvmmsg+0x6d0/0x6d0 [ 2458.969194] ? __lock_acquire+0x1657/0x5b00 [ 2458.970128] ___sys_sendmsg+0xf3/0x170 [ 2458.970978] ? sendmsg_copy_msghdr+0x160/0x160 [ 2458.971976] ? __fget_files+0x2cf/0x520 [ 2458.972834] ? lock_acquire+0x197/0x470 [ 2458.973681] ? find_held_lock+0x2c/0x110 [ 2458.974684] ? __might_fault+0xd3/0x180 [ 2458.975545] ? lock_downgrade+0x6d0/0x6d0 [ 2458.976484] __sys_sendmmsg+0x195/0x470 [ 2458.977353] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2458.978286] ? lock_downgrade+0x6d0/0x6d0 [ 2458.979222] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2458.980266] ? wait_for_completion_io+0x270/0x270 [ 2458.981310] ? rcu_read_lock_any_held+0x75/0xa0 [ 2458.982322] ? vfs_write+0x354/0xb10 [ 2458.983148] ? fput_many+0x2f/0x1a0 [ 2458.983926] ? ksys_write+0x1a9/0x260 [ 2458.984774] ? __ia32_sys_read+0xb0/0xb0 [ 2458.985666] __x64_sys_sendmmsg+0x99/0x100 [ 2458.986580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2458.987702] do_syscall_64+0x33/0x40 [ 2458.988515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.989632] RIP: 0033:0x7fb085b27b19 [ 2458.990443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.994407] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2458.996076] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2458.997618] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2458.999166] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.000709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2459.002256] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:51:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00e00001200215f0000000070e600000a"], 0x24}}, 0x0) 00:51:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000070000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:51:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2459.195003] loop1: detected capacity change from 0 to 1536 00:51:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e03f03001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2459.239979] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:51:36 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x700}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2459.258775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14385 comm=syz-executor.2 00:51:36 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 36) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:51:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300c0070000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2459.385955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2459.458989] FAULT_INJECTION: forcing a failure. [ 2459.458989] name failslab, interval 1, probability 0, space 0, times 0 [ 2459.461583] CPU: 1 PID: 14394 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2459.463088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2459.464872] Call Trace: [ 2459.465465] dump_stack+0x107/0x167 [ 2459.466274] should_fail.cold+0x5/0xa [ 2459.467129] ? create_object.isra.0+0x3a/0xa30 [ 2459.468137] should_failslab+0x5/0x20 [ 2459.468965] kmem_cache_alloc+0x5b/0x310 [ 2459.469831] ? mark_lock+0xf5/0x2df0 [ 2459.470671] create_object.isra.0+0x3a/0xa30 [ 2459.471631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2459.472738] kmem_cache_alloc_node+0x169/0x330 [ 2459.473739] ? fib6_table_lookup+0x636/0xaf0 [ 2459.474724] __alloc_skb+0x6d/0x5b0 [ 2459.475542] alloc_skb_with_frags+0x92/0x570 [ 2459.476526] ? mark_lock+0xf5/0x2df0 [ 2459.477357] ? mark_lock+0xf5/0x2df0 [ 2459.478174] sock_alloc_send_pskb+0x7af/0x930 [ 2459.479166] ? sk_alloc+0x350/0x350 [ 2459.479968] ? find_held_lock+0x2c/0x110 [ 2459.480853] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2459.482018] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2459.483115] ? rawv6_exit+0x20/0x20 [ 2459.483915] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2459.484961] ? ip6_mtu+0x1e9/0x3d0 [ 2459.485731] ? ip6_setup_cork+0xfb7/0x1740 [ 2459.486687] ip6_append_data+0x1e6/0x330 [ 2459.487553] ? rawv6_exit+0x20/0x20 [ 2459.488338] ? rawv6_exit+0x20/0x20 [ 2459.489152] icmp6_send+0x1250/0x1f30 [ 2459.490002] ? icmpv6_push_pending_frames+0x470/0x470 [ 2459.491137] ? find_held_lock+0x2c/0x110 [ 2459.492062] ? ip6_dst_hoplimit+0x440/0x440 [ 2459.493025] ip6_pkt_drop+0x3d2/0x7f0 [ 2459.493888] ? ip6_pkt_discard+0x20/0x20 [ 2459.494791] ip6_local_out+0x29f/0x4c0 [ 2459.495651] ip6_send_skb+0x117/0x460 [ 2459.496487] udp_v6_send_skb+0x7b7/0x1620 [ 2459.497405] udpv6_sendmsg+0x216b/0x2b40 [ 2459.498316] ? ip_frag_init+0x350/0x350 [ 2459.499236] ? udp_v6_push_pending_frames+0x360/0x360 [ 2459.500365] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2459.501532] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2459.502735] ? lock_acquire+0x197/0x470 [ 2459.503592] ? find_held_lock+0x2c/0x110 [ 2459.504498] ? sock_has_perm+0x1ea/0x280 [ 2459.505403] ? __import_iovec+0x458/0x590 [ 2459.506303] ? udp_v6_push_pending_frames+0x360/0x360 [ 2459.507447] inet6_sendmsg+0x105/0x140 [ 2459.508314] ? inet6_compat_ioctl+0x320/0x320 [ 2459.509295] __sock_sendmsg+0xf2/0x190 [ 2459.510150] ____sys_sendmsg+0x334/0x870 [ 2459.511068] ? sock_write_iter+0x3d0/0x3d0 [ 2459.511977] ? do_recvmmsg+0x6d0/0x6d0 [ 2459.512834] ? __lock_acquire+0x1657/0x5b00 [ 2459.513803] ___sys_sendmsg+0xf3/0x170 [ 2459.514688] ? sendmsg_copy_msghdr+0x160/0x160 [ 2459.515689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2459.516826] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2459.517788] ? trace_hardirqs_on+0x5b/0x180 [ 2459.518740] ? lock_acquire+0x197/0x470 [ 2459.519615] ? find_held_lock+0x2c/0x110 [ 2459.520527] ? __might_fault+0xd3/0x180 [ 2459.521418] ? lock_downgrade+0x6d0/0x6d0 [ 2459.522342] __sys_sendmmsg+0x195/0x470 [ 2459.523238] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2459.524197] ? lock_downgrade+0x6d0/0x6d0 [ 2459.525132] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2459.526190] ? wait_for_completion_io+0x270/0x270 [ 2459.527265] ? rcu_read_lock_any_held+0x75/0xa0 [ 2459.528285] ? vfs_write+0x354/0xb10 [ 2459.529107] ? fput_many+0x2f/0x1a0 [ 2459.529906] ? ksys_write+0x1a9/0x260 [ 2459.530751] ? __ia32_sys_read+0xb0/0xb0 [ 2459.531644] __x64_sys_sendmmsg+0x99/0x100 [ 2459.532575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2459.533686] do_syscall_64+0x33/0x40 [ 2459.534514] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2459.535657] RIP: 0033:0x7fb085b27b19 [ 2459.536482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.540522] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2459.542192] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2459.543775] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2459.545338] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.546920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2459.548476] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2459.561595] loop1: detected capacity change from 0 to 1536 [ 2459.585706] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:51:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000201200215f0000000070e600000a"], 0x24}}, 0x0) 00:51:53 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f00000002c0), &(0x7f0000ff5000/0x9000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) r5 = dup2(r1, r4) io_uring_enter(r5, 0xa43, 0x9852, 0x0, &(0x7f0000000080)={[0x100]}, 0x8) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x81, 0x69, 0x11, 0x4, 0x0, 0x7, 0x1003c, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x74, 0x1, @perf_config_ext={0x456, 0x3}, 0x8000, 0x8, 0x8, 0x7, 0x2, 0x401, 0x7fff, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0x10, r0, 0x3) 00:51:53 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 37) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:51:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300000b0000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:51:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:51:53 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xb000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:51:53 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x20000081}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:51:53 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2476.237986] FAULT_INJECTION: forcing a failure. [ 2476.237986] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.238207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14421 comm=syz-executor.2 [ 2476.239476] CPU: 1 PID: 14414 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2476.242826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2476.243850] Call Trace: [ 2476.244186] dump_stack+0x107/0x167 [ 2476.244637] should_fail.cold+0x5/0xa [ 2476.245095] ? create_object.isra.0+0x3a/0xa30 [ 2476.245659] should_failslab+0x5/0x20 [ 2476.246126] kmem_cache_alloc+0x5b/0x310 [ 2476.246634] ? mark_lock+0xf5/0x2df0 [ 2476.247099] create_object.isra.0+0x3a/0xa30 [ 2476.247641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2476.248269] kmem_cache_alloc_node+0x169/0x330 [ 2476.248820] ? fib6_table_lookup+0x636/0xaf0 [ 2476.249368] __alloc_skb+0x6d/0x5b0 [ 2476.249814] alloc_skb_with_frags+0x92/0x570 [ 2476.250355] ? mark_lock+0xf5/0x2df0 [ 2476.250807] ? mark_lock+0xf5/0x2df0 [ 2476.251315] sock_alloc_send_pskb+0x7af/0x930 [ 2476.251869] ? sk_alloc+0x350/0x350 [ 2476.252320] ? find_held_lock+0x2c/0x110 [ 2476.252813] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2476.253461] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2476.254073] ? rawv6_exit+0x20/0x20 [ 2476.254541] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2476.255142] ? ip6_mtu+0x1e9/0x3d0 [ 2476.255585] ? ip6_setup_cork+0xfb7/0x1740 [ 2476.256104] ip6_append_data+0x1e6/0x330 [ 2476.256598] ? rawv6_exit+0x20/0x20 [ 2476.257041] ? rawv6_exit+0x20/0x20 [ 2476.257501] icmp6_send+0x1250/0x1f30 [ 2476.257981] ? icmpv6_push_pending_frames+0x470/0x470 [ 2476.257993] ? find_held_lock+0x2c/0x110 [ 2476.258028] ? ip6_dst_hoplimit+0x440/0x440 [ 2476.260182] ip6_pkt_drop+0x3d2/0x7f0 [ 2476.260664] ? ip6_pkt_discard+0x20/0x20 [ 2476.261155] ip6_local_out+0x29f/0x4c0 [ 2476.261654] ip6_send_skb+0x117/0x460 [ 2476.262117] udp_v6_send_skb+0x7b7/0x1620 [ 2476.262651] udpv6_sendmsg+0x216b/0x2b40 [ 2476.263165] ? ip_frag_init+0x350/0x350 [ 2476.263669] ? udp_v6_push_pending_frames+0x360/0x360 [ 2476.264319] ? perf_event_task_disable+0x390/0x390 [ 2476.264928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2476.265578] ? lock_acquire+0x197/0x470 [ 2476.266057] ? find_held_lock+0x2c/0x110 [ 2476.266575] ? sock_has_perm+0x1ea/0x280 [ 2476.267093] ? __import_iovec+0x458/0x590 [ 2476.267607] ? udp_v6_push_pending_frames+0x360/0x360 [ 2476.268237] inet6_sendmsg+0x105/0x140 [ 2476.268728] ? inet6_compat_ioctl+0x320/0x320 [ 2476.269279] __sock_sendmsg+0xf2/0x190 [ 2476.269747] ____sys_sendmsg+0x334/0x870 [ 2476.270242] ? sock_write_iter+0x3d0/0x3d0 [ 2476.270766] ? do_recvmmsg+0x6d0/0x6d0 [ 2476.271262] ? __lock_acquire+0x1657/0x5b00 [ 2476.271805] ___sys_sendmsg+0xf3/0x170 [ 2476.272288] ? sendmsg_copy_msghdr+0x160/0x160 [ 2476.272850] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2476.273403] ? _raw_spin_unlock_irq+0x27/0x30 [ 2476.273955] ? lock_acquire+0x197/0x470 [ 2476.274444] ? find_held_lock+0x2c/0x110 [ 2476.274943] ? __might_fault+0xd3/0x180 [ 2476.275430] ? lock_downgrade+0x6d0/0x6d0 [ 2476.275958] __sys_sendmmsg+0x195/0x470 [ 2476.276451] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2476.276965] ? lock_downgrade+0x6d0/0x6d0 [ 2476.277486] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2476.278111] ? wait_for_completion_io+0x270/0x270 [ 2476.278853] ? rcu_read_lock_any_held+0x75/0xa0 [ 2476.279501] ? vfs_write+0x354/0xb10 [ 2476.280056] ? fput_many+0x2f/0x1a0 [ 2476.280565] ? ksys_write+0x1a9/0x260 [ 2476.281024] ? __ia32_sys_read+0xb0/0xb0 [ 2476.281608] __x64_sys_sendmmsg+0x99/0x100 [ 2476.282153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2476.282791] do_syscall_64+0x33/0x40 [ 2476.283262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2476.283893] RIP: 0033:0x7fb085b27b19 [ 2476.284365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2476.286610] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2476.287543] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2476.288402] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2476.289257] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2476.290120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2476.290988] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:51:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00f0ff7f1200215f0000000070e600000a"], 0x24}}, 0x0) [ 2476.301506] loop1: detected capacity change from 0 to 1536 00:51:53 executing program 0: timer_create(0x1, &(0x7f00000000c0)={0x0, 0x3e, 0x0, @thr={&(0x7f0000000000)='f', &(0x7f0000000040)="ad293405aace3e4be0dfe729b692c27ecd029bd148ba85b7bd1735805fb27f3462f7af9df217a00f9f80ce7ff1d8d03c4483cc748b0cf2d849646814d09429a3f61f7fde1edcd631a24468c1bac7e25470ea5193426de109f46922611403774cf4067f65cf15ed87500db2ac0998"}}, &(0x7f0000000100)=0x0) timer_gettime(r0, &(0x7f0000000140)) [ 2476.348464] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:51:53 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2476.400953] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:51:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2476.440868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14439 comm=syz-executor.2 [ 2476.454472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:51:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="effdffff1200215f0000000070e600000a"], 0x24}}, 0x0) 00:51:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b9"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:51:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000180000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:51:53 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000003a40), 0x8240, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x1d, 0xc21}, 0x14}}, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7ff) [ 2476.523007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14448 comm=syz-executor.2 00:51:53 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 38) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2476.557482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2476.565426] loop1: detected capacity change from 0 to 1536 [ 2476.573280] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:51:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b9"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2476.608832] FAULT_INJECTION: forcing a failure. [ 2476.608832] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.610171] CPU: 1 PID: 14455 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2476.610979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2476.611932] Call Trace: [ 2476.612239] dump_stack+0x107/0x167 [ 2476.612661] should_fail.cold+0x5/0xa [ 2476.613111] ? create_object.isra.0+0x3a/0xa30 [ 2476.613636] should_failslab+0x5/0x20 [ 2476.614078] kmem_cache_alloc+0x5b/0x310 [ 2476.614550] create_object.isra.0+0x3a/0xa30 [ 2476.615060] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2476.615645] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2476.616232] ? alloc_skb_with_frags+0x92/0x570 [ 2476.616756] ? fib6_table_lookup+0x636/0xaf0 [ 2476.617271] __alloc_skb+0xb1/0x5b0 [ 2476.617698] alloc_skb_with_frags+0x92/0x570 [ 2476.618204] ? mark_lock+0xf5/0x2df0 [ 2476.618634] ? mark_lock+0xf5/0x2df0 [ 2476.619068] sock_alloc_send_pskb+0x7af/0x930 [ 2476.619598] ? sk_alloc+0x350/0x350 [ 2476.620015] ? find_held_lock+0x2c/0x110 [ 2476.620484] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2476.621095] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2476.621679] ? rawv6_exit+0x20/0x20 [ 2476.622104] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2476.622660] ? ip6_mtu+0x1e9/0x3d0 [ 2476.623076] ? ip6_setup_cork+0xfb7/0x1740 [ 2476.623564] ip6_append_data+0x1e6/0x330 [ 2476.624028] ? rawv6_exit+0x20/0x20 [ 2476.624449] ? rawv6_exit+0x20/0x20 [ 2476.624869] icmp6_send+0x1250/0x1f30 [ 2476.625316] ? icmpv6_push_pending_frames+0x470/0x470 [ 2476.625910] ? find_held_lock+0x2c/0x110 [ 2476.626396] ? ip6_dst_hoplimit+0x440/0x440 [ 2476.626900] ip6_pkt_drop+0x3d2/0x7f0 [ 2476.627337] ? ip6_pkt_discard+0x20/0x20 [ 2476.627807] ip6_local_out+0x29f/0x4c0 [ 2476.628255] ip6_send_skb+0x117/0x460 [ 2476.628698] udp_v6_send_skb+0x7b7/0x1620 [ 2476.629182] udpv6_sendmsg+0x216b/0x2b40 [ 2476.629650] ? ip_frag_init+0x350/0x350 [ 2476.630114] ? udp_v6_push_pending_frames+0x360/0x360 [ 2476.630721] ? lock_acquire+0x197/0x470 [ 2476.631189] ? find_held_lock+0x2c/0x110 [ 2476.631663] ? sock_has_perm+0x1ea/0x280 [ 2476.632143] ? __import_iovec+0x458/0x590 [ 2476.632621] ? udp_v6_push_pending_frames+0x360/0x360 [ 2476.633215] inet6_sendmsg+0x105/0x140 [ 2476.633660] ? inet6_compat_ioctl+0x320/0x320 [ 2476.634175] __sock_sendmsg+0xf2/0x190 [ 2476.634622] ____sys_sendmsg+0x334/0x870 [ 2476.635099] ? sock_write_iter+0x3d0/0x3d0 [ 2476.635583] ? do_recvmmsg+0x6d0/0x6d0 [ 2476.636033] ? __lock_acquire+0x1657/0x5b00 [ 2476.636534] ___sys_sendmsg+0xf3/0x170 [ 2476.636980] ? sendmsg_copy_msghdr+0x160/0x160 [ 2476.637510] ? __fget_files+0x2cf/0x520 [ 2476.637974] ? lock_acquire+0x197/0x470 [ 2476.638429] ? find_held_lock+0x2c/0x110 [ 2476.638909] ? __might_fault+0xd3/0x180 [ 2476.639369] ? lock_downgrade+0x6d0/0x6d0 [ 2476.639855] __sys_sendmmsg+0x195/0x470 [ 2476.640314] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2476.640812] ? lock_downgrade+0x6d0/0x6d0 [ 2476.641297] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2476.641852] ? wait_for_completion_io+0x270/0x270 [ 2476.642406] ? rcu_read_lock_any_held+0x75/0xa0 [ 2476.642951] ? vfs_write+0x354/0xb10 [ 2476.643378] ? fput_many+0x2f/0x1a0 [ 2476.643797] ? ksys_write+0x1a9/0x260 [ 2476.644235] ? __ia32_sys_read+0xb0/0xb0 [ 2476.644711] __x64_sys_sendmmsg+0x99/0x100 [ 2476.645201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2476.645791] do_syscall_64+0x33/0x40 [ 2476.646221] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2476.646810] RIP: 0033:0x7fb085b27b19 [ 2476.647251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2476.649368] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2476.650252] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2476.651083] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2476.651904] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2476.652724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2476.653551] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2476.679332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14460 comm=syz-executor.2 [ 2476.703091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:51:53 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:52:06 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:52:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f00215f0000000070e600000a"], 0x24}}, 0x0) 00:52:06 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:52:06 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 39) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:52:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300001c0000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:52:06 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x7ffff000}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:52:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b9"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:52:06 executing program 0: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@un=@abs, &(0x7f0000000340)=0x80) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1f0, 0x0, 0x87c2b90e8fc3c8c6, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xef88}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xec60}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x394}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x29c}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xa1}, {0x8, 0xb, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0xba}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff5}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x64b}, {0x8, 0xb, 0x760}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8481}, {0x5}, {0x6, 0x11, 0x1ff}, {0x8, 0xb, 0x6}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x840}, 0x24000084) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x90, 0xe8c8d6435dc2a6cd, 0xffff, 0x6, {{0x27, 0x4, 0x2, 0x31, 0x9c, 0x66, 0x0, 0x3, 0x29, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x44, 0x99, 0x1, 0x2, [{@remote, 0x9}, {@private=0xa010101, 0x2}, {@remote, 0xee}, {@private=0xa010101, 0x400}, {@rand_addr=0x64010101, 0x45}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x31, 0x3, 0x7, [{@remote, 0xcb3}, {@loopback, 0x20}, {@loopback, 0x7}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x7, 0x3, "c9"}]}, @timestamp={0x44, 0x14, 0xb9, 0x0, 0x9, [0x4, 0x0, 0xffffffc8, 0x0]}]}}}}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x4, 0x0, 0x2c, @rand_addr=' \x01\x00', @loopback, 0x20, 0x7800, 0x2, 0x3}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @initdev, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @initdev}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x15, 0x0, 0x7f, 0x30, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0xe00, 0x80, 0x2, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2d8, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x238, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xa35}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8902, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r10, 0x0) [ 2489.907174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=14470 comm=syz-executor.6 [ 2489.909114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=14471 comm=syz-executor.6 [ 2489.942344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14482 comm=syz-executor.2 00:52:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000215f0000000070e600000a"], 0x24}}, 0x0) [ 2489.963941] loop1: detected capacity change from 0 to 1536 [ 2489.973866] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2489.982787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2489.984399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2489.992146] FAULT_INJECTION: forcing a failure. [ 2489.992146] name failslab, interval 1, probability 0, space 0, times 0 [ 2489.993452] CPU: 0 PID: 14489 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2489.994244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2489.995252] Call Trace: [ 2489.995560] dump_stack+0x107/0x167 [ 2489.995978] should_fail.cold+0x5/0xa [ 2489.996417] ? create_object.isra.0+0x3a/0xa30 [ 2489.996942] should_failslab+0x5/0x20 [ 2489.997376] kmem_cache_alloc+0x5b/0x310 [ 2489.997846] create_object.isra.0+0x3a/0xa30 [ 2489.998349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2489.998930] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2489.999532] ? alloc_skb_with_frags+0x92/0x570 [ 2490.000061] ? fib6_table_lookup+0x636/0xaf0 [ 2490.000571] __alloc_skb+0xb1/0x5b0 [ 2490.000993] alloc_skb_with_frags+0x92/0x570 [ 2490.001499] ? mark_lock+0xf5/0x2df0 [ 2490.001925] ? mark_lock+0xf5/0x2df0 [ 2490.002355] sock_alloc_send_pskb+0x7af/0x930 [ 2490.002874] ? sk_alloc+0x350/0x350 [ 2490.003298] ? find_held_lock+0x2c/0x110 [ 2490.003768] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2490.004374] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2490.004952] ? rawv6_exit+0x20/0x20 [ 2490.005378] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2490.005930] ? ip6_mtu+0x1e9/0x3d0 [ 2490.006337] ? ip6_setup_cork+0xfb7/0x1740 [ 2490.006822] ip6_append_data+0x1e6/0x330 [ 2490.007288] ? rawv6_exit+0x20/0x20 [ 2490.007706] ? rawv6_exit+0x20/0x20 [ 2490.008123] icmp6_send+0x1250/0x1f30 [ 2490.008570] ? icmpv6_push_pending_frames+0x470/0x470 [ 2490.009158] ? find_held_lock+0x2c/0x110 [ 2490.009643] ? ip6_dst_hoplimit+0x440/0x440 [ 2490.010144] ip6_pkt_drop+0x3d2/0x7f0 [ 2490.010581] ? ip6_pkt_discard+0x20/0x20 [ 2490.011057] ip6_local_out+0x29f/0x4c0 [ 2490.011503] ip6_send_skb+0x117/0x460 [ 2490.011947] udp_v6_send_skb+0x7b7/0x1620 [ 2490.012430] udpv6_sendmsg+0x216b/0x2b40 [ 2490.012900] ? ip_frag_init+0x350/0x350 [ 2490.013366] ? udp_v6_push_pending_frames+0x360/0x360 [ 2490.013974] ? lock_acquire+0x197/0x470 [ 2490.014426] ? find_held_lock+0x2c/0x110 [ 2490.014899] ? sock_has_perm+0x1ea/0x280 [ 2490.015388] ? __import_iovec+0x458/0x590 [ 2490.015865] ? udp_v6_push_pending_frames+0x360/0x360 [ 2490.016459] inet6_sendmsg+0x105/0x140 [ 2490.016904] ? inet6_compat_ioctl+0x320/0x320 [ 2490.017425] __sock_sendmsg+0xf2/0x190 [ 2490.017872] ____sys_sendmsg+0x334/0x870 [ 2490.018339] ? sock_write_iter+0x3d0/0x3d0 [ 2490.018822] ? do_recvmmsg+0x6d0/0x6d0 [ 2490.019279] ? __lock_acquire+0x1657/0x5b00 [ 2490.019784] ___sys_sendmsg+0xf3/0x170 [ 2490.020234] ? sendmsg_copy_msghdr+0x160/0x160 [ 2490.020766] ? __fget_files+0x2cf/0x520 [ 2490.021227] ? lock_acquire+0x197/0x470 [ 2490.021684] ? find_held_lock+0x2c/0x110 [ 2490.022155] ? __might_fault+0xd3/0x180 [ 2490.022608] ? lock_downgrade+0x6d0/0x6d0 [ 2490.023103] __sys_sendmmsg+0x195/0x470 [ 2490.023569] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2490.024065] ? lock_downgrade+0x6d0/0x6d0 [ 2490.024558] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2490.025111] ? wait_for_completion_io+0x270/0x270 [ 2490.025674] ? rcu_read_lock_any_held+0x75/0xa0 [ 2490.026208] ? vfs_write+0x354/0xb10 [ 2490.026639] ? fput_many+0x2f/0x1a0 [ 2490.027068] ? ksys_write+0x1a9/0x260 [ 2490.027511] ? __ia32_sys_read+0xb0/0xb0 [ 2490.027981] __x64_sys_sendmmsg+0x99/0x100 [ 2490.028473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2490.029070] do_syscall_64+0x33/0x40 [ 2490.029499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2490.030087] RIP: 0033:0x7fb085b27b19 [ 2490.030518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2490.032630] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2490.033511] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2490.034343] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2490.035171] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2490.036001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2490.036826] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2490.044339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:52:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001100215f0000000070e600000a"], 0x24}}, 0x0) 00:52:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000200000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2490.142493] loop1: detected capacity change from 0 to 1536 00:52:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2490.222954] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2490.249623] scsi_io_completion_action: 32 callbacks suppressed [ 2490.249696] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2490.253263] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2490.254791] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2490.256286] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2490.257976] print_req_error: 526 callbacks suppressed [ 2490.257995] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 2490.263314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2490.264526] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2490.266623] buffer_io_error: 470 callbacks suppressed [ 2490.266635] Buffer I/O error on dev sr0, logical block 0, async page read [ 2490.269418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2490.271409] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2490.273492] Buffer I/O error on dev sr0, logical block 1, async page read [ 2490.275439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2490.276831] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2490.278925] Buffer I/O error on dev sr0, logical block 2, async page read [ 2490.280707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2490.281916] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2490.284034] Buffer I/O error on dev sr0, logical block 3, async page read [ 2490.288168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2490.290049] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2490.292431] Buffer I/O error on dev sr0, logical block 4, async page read [ 2490.292936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14514 comm=syz-executor.2 [ 2490.293989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2490.297982] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 2490.300072] Buffer I/O error on dev sr0, logical block 5, async page read [ 2490.301585] Buffer I/O error on dev sr0, logical block 6, async page read [ 2490.303078] Buffer I/O error on dev sr0, logical block 7, async page read [ 2490.387046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:52:21 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:52:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240200001200215f0000000070e600000a"], 0x24}}, 0x0) 00:52:21 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 40) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:52:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x1d, 0xc21}, 0x14}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x5c}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usblp', 0x408000, 0x10) r4 = syz_open_dev$rtc(&(0x7f0000000180), 0x76334221, 0x100) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000001c0)={0x60000010}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 00:52:21 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x94}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:52:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300003f0000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:52:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:52:21 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2504.639599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14526 comm=syz-executor.2 [ 2504.653908] loop1: detected capacity change from 0 to 1536 [ 2504.660388] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2504.674113] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2504.688470] FAULT_INJECTION: forcing a failure. 00:52:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000630000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2504.688470] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.691262] CPU: 0 PID: 14529 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2504.692762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2504.694558] Call Trace: [ 2504.695134] dump_stack+0x107/0x167 [ 2504.695941] should_fail.cold+0x5/0xa [ 2504.696777] ? create_object.isra.0+0x3a/0xa30 [ 2504.697772] should_failslab+0x5/0x20 [ 2504.698600] kmem_cache_alloc+0x5b/0x310 [ 2504.699497] create_object.isra.0+0x3a/0xa30 [ 2504.700452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2504.701568] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2504.702670] ? alloc_skb_with_frags+0x92/0x570 [ 2504.703683] ? fib6_table_lookup+0x636/0xaf0 [ 2504.704647] __alloc_skb+0xb1/0x5b0 [ 2504.705449] alloc_skb_with_frags+0x92/0x570 [ 2504.706402] ? mark_lock+0xf5/0x2df0 [ 2504.707213] ? mark_lock+0xf5/0x2df0 [ 2504.708021] sock_alloc_send_pskb+0x7af/0x930 [ 2504.709007] ? sk_alloc+0x350/0x350 [ 2504.709797] ? find_held_lock+0x2c/0x110 [ 2504.710685] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2504.711840] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2504.712939] ? rawv6_exit+0x20/0x20 [ 2504.713736] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 00:52:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:52:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240300001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2504.714771] ? ip6_mtu+0x1e9/0x3d0 [ 2504.715633] ? ip6_setup_cork+0xfb7/0x1740 [ 2504.716549] ip6_append_data+0x1e6/0x330 [ 2504.717424] ? rawv6_exit+0x20/0x20 [ 2504.718263] ? rawv6_exit+0x20/0x20 [ 2504.719055] icmp6_send+0x1250/0x1f30 [ 2504.719912] ? icmpv6_push_pending_frames+0x470/0x470 [ 2504.721025] ? find_held_lock+0x2c/0x110 [ 2504.721932] ? ip6_dst_hoplimit+0x440/0x440 [ 2504.722868] ip6_pkt_drop+0x3d2/0x7f0 [ 2504.723700] ? ip6_pkt_discard+0x20/0x20 [ 2504.724572] ip6_local_out+0x29f/0x4c0 [ 2504.725427] ip6_send_skb+0x117/0x460 [ 2504.726246] udp_v6_send_skb+0x7b7/0x1620 [ 2504.727159] udpv6_sendmsg+0x216b/0x2b40 [ 2504.728031] ? ip_frag_init+0x350/0x350 [ 2504.728890] ? udp_v6_push_pending_frames+0x360/0x360 [ 2504.729992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2504.731112] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2504.732311] ? lock_acquire+0x197/0x470 [ 2504.733169] ? find_held_lock+0x2c/0x110 [ 2504.734055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2504.735180] ? sock_has_perm+0x1ea/0x280 [ 2504.736070] ? __import_iovec+0x458/0x590 [ 2504.736960] ? udp_v6_push_pending_frames+0x360/0x360 [ 2504.738062] inet6_sendmsg+0x105/0x140 [ 2504.738889] ? inet6_compat_ioctl+0x320/0x320 [ 2504.739852] __sock_sendmsg+0xf2/0x190 [ 2504.740698] ____sys_sendmsg+0x334/0x870 [ 2504.741573] ? sock_write_iter+0x3d0/0x3d0 [ 2504.742476] ? do_recvmmsg+0x6d0/0x6d0 [ 2504.743324] ? __lock_acquire+0x1657/0x5b00 [ 2504.744262] ___sys_sendmsg+0xf3/0x170 [ 2504.745106] ? sendmsg_copy_msghdr+0x160/0x160 [ 2504.746067] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2504.747017] ? _raw_spin_unlock_irq+0x27/0x30 [ 2504.747973] ? lock_acquire+0x197/0x470 [ 2504.748816] ? find_held_lock+0x2c/0x110 [ 2504.749681] ? __might_fault+0xd3/0x180 [ 2504.750520] ? lock_downgrade+0x6d0/0x6d0 [ 2504.751422] __sys_sendmmsg+0x195/0x470 [ 2504.752277] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2504.753187] ? lock_downgrade+0x6d0/0x6d0 [ 2504.754080] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2504.755107] ? wait_for_completion_io+0x270/0x270 [ 2504.756133] ? rcu_read_lock_any_held+0x75/0xa0 [ 2504.757110] ? vfs_write+0x354/0xb10 [ 2504.757895] ? fput_many+0x2f/0x1a0 [ 2504.758660] ? ksys_write+0x1a9/0x260 [ 2504.759468] ? __ia32_sys_read+0xb0/0xb0 [ 2504.760329] __x64_sys_sendmmsg+0x99/0x100 [ 2504.761221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2504.762302] do_syscall_64+0x33/0x40 [ 2504.763093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2504.764184] RIP: 0033:0x7fb085b27b19 [ 2504.764958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2504.768801] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2504.770400] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2504.771900] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2504.773391] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2504.774883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2504.776382] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:52:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x20, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x4115, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8, 0x5e5f52a8}, 0x10000, 0x2, 0x2, 0x4, 0xfff, 0x6, 0x7ff, 0x0, 0xffffffc1, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x7}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x44a8, 0x2b, 0x1, 0x70bd29, 0x25dfdbfc, {0x19}, [@generic="d6500191d53bb835823ae41f4d335c6ef926882ac9bc275b2b8cec8974bb4fac6906ab10083f96c59cab572ab37470a0e9e6429ef91b434c3a4bdbc922adab1cea088775eab1bb20324f656614b61ddf3e17d46c26a0a586cae4d9d55c43b4cd3415df441f81988d209e43fbdfa44b9493b95c82c672cd5513c20a0cd62a92f6ee39909899c2ba41af6439b2645a54fc79bb925dd7a3c9afda63bbf4f202a544673bb2a8a402c22c25fb26fabec956b2cc39beb1d7b8a099dfd28140a6b828647887447f7c9709086212204d7132a012272806029465c0d7d7415be07f9b9669b39798900680aad1c9e1c00a5c13da4e8ae3ab9177", @typed={0x4, 0x85}, @nested={0x12b4, 0x50, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @uid=0xee00}, @typed={0x5, 0x7e, 0x0, 0x0, @str='\x00'}, @generic="70337f2cff3a5f09dd5a36059a196f29c837cb4abda2948d65f1b4c068ae001667f63e0f0396be4e19f1c16b2c6434511a58c57b40b4fe308e164e85672514ee014a0f7165664efdd3f2a3fd706c2d1e51e68caf050cb5030bba3720736ff4c145cabe86be85579be871d2478d608cd13874c46a27eb8d8898608dfd6a05013b62b1d4ed19b384f3ce84174404effeb0f8c0a0614e0f52763addb07662df7ccc59337c342700274f8ae6774fb1c52dee124350e0b3e94c02e2cebbd6eb6b8f9d19db53", @generic="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", @generic="cf7ddf2c91a1db3c0f4ea311db7bd0cadd5fbcbe08ff534241cae0c5d55391f549e54cab3dc8d04bc96ad7433f1d6fb010ba476901b1f858b5fd0dbdff474d4d745da2b76cbd10bedddbb355961b0fcd516f751460f99739ffc0296b9f793fb15db9364ba74dee319e24cf3fe865e850ab2fb258a2764050b413b9d827cb83497410e0395a6819a2a021fceea9601d28b62f6035c76106ff6b09aee13c7cd96184c179deb2ef741edc69b04f2ab86efefb7f2d038cf934c0650d9a2d98a6e6033dd081f5437d19debd94531c1aec3fbc78cde08c2125e80d6e6856c69307c5d1e4573ab3dc1db00551b2b5bf", @generic="b5d7739ee04c0458eeac40c73c9ee4b33118964ac051b7b7ce284b74dc9b4ba24942d874167f980a7bfe4b936894d05f0462cadc70ae3c4e2d99a3ea476fd6ec2aab8064a0f9cf5f22935b6a66fa0cb1e66c5b97a2971c9a036c7af61626f625f69088dc8bb0610516d53076be0a6c255bae29d41b0383b3809f2b3b71030d1037b9e777e1d459cadea5d47acb2554628109e65d896365c82f731f00261f5866ab5aa3dea8e33d30be42966572647b1c7205362eeeccff3d3b771e7b744d6f0139d7f13a4ac7a0fde99c9e55d2851342186fadafb6e94672581c559683f6dc595de27ae062252746058d86d15520e24e81"]}, @nested={0x2010, 0x4e, 0x0, 0x1, [@generic="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", @generic="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", @typed={0x4, 0x86}, @typed={0x8, 0x10, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="3d16982872f5460368b25ac5b7685772d7ca8079fa27bcc735c9c10e5260ff8e1a58a7bf1a38310bc686e1f75e370c20c4f1143080f9096c78328c2029328b9e2627a439624768d8aea6d0d6e50f631872c7037d11a56a7cd47b0062d244a5333487e22f71c94f962d7712daf6342c4386e408986de83fd44d2e69241b85944298bd0f06c4be6b9e014a463be92452c33a8b6c5100fe8a7dd8b675e9a16553b4f000aa1978ed430c4a7ace3c4e57e0ce1304af5e4d8ef98c559c5bfee7d3ad15d8f2cf18cec88609a4d5f44db6b5c708b23c5a3b42dfdcc5eb3c28795d627c9ca4c246dedb7dfd3de5dd0dd15d219fb2ba9ab68210befdcd580ee16a41f00d75093c606b03cb62dafd082d516e6d40d6d9c629a4585432de8d0738bc0737844fdb7007c4e28cd8ad0231e697491b4f3fa44a7bd1b2a602743e33638e525efd8ab9c17e450861d229286e569284e1cc52e1e6115e476f1fd63f55ee9107a49c6bd4a81418b6509c17a3b9828f0a1ca80610890798b3bc95bfbf7f7b198eba852344bb4fe0f74a9cc6cb97c789ef432ec7040a8caf71de9f20066cc3049412e7069365f32a9b946cba26ee73dbb4d1d8f8b3b8db3110ffad12f51ce3b0e0bdf3abe10d973efdd3273ef7d5f35a5b13355328f5a76910732419ebd5d2b91b62eecf46792f97f5a59505e1d59e306e7c276d1367beb5938b33ab42d195386463824738be730dbfc82d85f6dc7050efbd5464b5cdaddfe570dca52202bf486cf949647e386128f4d552779814b41eecce7f4639e5f5f53081af8f42d04e642a1b111f488889f65d7ab47eaa0a09c52c97a90b09320586773d1530af55eb84989a9e0a69790e84548e7387889a1ba5fa5e17743654210f407318d2e165c7d5f009abc25fb84821d0e4c75b46a076da509adb491558ebd0da00b715f857b8f0bc7be254efa843eef7d9b74ec6d642a914f82a5acd97e305d0051040362750461f5a040d8096e74dfa6095da8908f6d9e50c01798fe9a604263da7746d61fa0ee0f056cd1137fb6c277b1225643111bbde6e25285ab2cb2f9680236ebb56be3f95c230176ebe8137a3d7987e26100ee3904432964ce71cc19cb855832151da58239cd22c5784e57ba86b7a817b164f75fe3301fba0d973a307d09a3eb3c18d1280686a240980c4d1732dbf946d4fa1ac86c9cecbbafe0a99b55a470c8d8b744bb53a0cb347699d0952d9171339dca65af1d97077d0921e67d9866d018ec15722dd7eaef2e53d19049b18201a04c8fc10f13f484f0dda89fbc8d359068ea92ec9384d25940b939ef331ad2adf834fe93cd288cdc33a01078b5e16b0f7a3b567494db164ff02e1af9a556c1db3f9b9b65a63c8611596872e9a099020555a052285946a304535dfca9d4ec304720c34eaea510eb75ad89de76c4bc69c18922836a6cdc674b98e4ddd66c4023a495c2e3272106ebae4cf4aef913650e98d9b0ac1eea183f013a4e3261994c3f74c5814ac366c58f0fb22ffedf6efcc8565574dcf6bd7ec024874cf7169499dd57c1351f1fb8fa8d67e8bc735575da7d9016602880610091107892e0cc962e2e03de8fddb63080a9ec280f54982792e7f3915f82512533b3defaf31ba123c2cfe061543df43f15cc5e8d8db334a854aa863ea532d272c025f91d796d1e7757c520310976f5b60e2592fc7101a153146ddd9346fd382d77093373d49855c19d19d3891bf5a61a864259a5424f0ef0d6e3fff19c18fa6640e8ac0cddea9ff7fd0eb66f5d0e0722070b4469e20afa49e06d8fccac424a6653462a6031b8cde46031463efd4d14b9ef82041507153ad6cd4437171ad7551cd147b3a7ab797eaf2cc2b739691e4a6fba2fd80fd4ae74c573b3864ae52238c26c22601331d6c157202f2e9976808addafd155dfa3fff07e96c0c91d2d19186bebfbf453d0cfed82ff525001274e6184a429f5defa5efa982b766018fc256ff00db37f6476571f1eef4affa50656e23465536ddc823d5c2e3d76ab1c7a25660ac5c80cf689caca67745df16b28c00b3f1fbce1990e2308642bc89df8f84e325956d95a19865196def485a17b6dacac55b47e863c95bb05fe287d22cf9e8e137e057570ad86e298c082e8843c816d280e6ac5e979b57da72d3d9d77a0f249a18c04505bfda3c13e051c9e55b4bb401f62f33f79da70ba6eaf5f6fab818561e1efc02f72323ff0ba91a89883c2a2708d81a2e2911c2a952a07a12218579b81779112ce7325fc7e8360f5bad4498993c759bdd1cfe9e1b8ab7db0e1b8411ce0ed6734eb6a4abd8a6c30a24b668c00444a1f579a48f8f2d9e35281883c00ad363879c3b55444015bf846d7904be163cf9c258f0d759f6345c60be735906471fd14610499eabad398c1f60b9537d03b89ee50883db0c969df4094d514646183b9210bd020257479cab926922fa71dd6be8eb2f34301696e1e8939b6e82700fdced1d0098379895846eed8ce08ee770d92cd394a63f2fe50bb8afd6b0917396f53dfe83453d362e6c3f4fef25dce7127f80fbfb1a74cccff45144272fa21acb1f36d867c36a34e72d67c0bc932f8c7772b8c783219c4c4814ef18175989a1feb9ce6ce7a4eff7f06ca8d17166781756592b37eac57285530f6b873de8587709bd40a2a9fd84201a2bfad1bbef710a59e219adce94900615fe8512974d952715355611b670b41e4727179001548b1952ef7a5f2999bb538e286117c0a5deb21139c91f847ef20a776249ce63b15df16f50cdac4325a699ebac41768c6c4a264f953f5ca5c8c81818957623fe735159bbff53dd525d5ff1fd36462e4acf248a34336ae8c6672b777b07d3d6884b69d2d67dff33733776ffbb6b4751c4f792558ac739d8301575a8cb92b130f4b6c7440096a92ef9525ece185ef3810b78056b6bf5a4166890bb0d32e961418d814659f595e491204f263490988d4a488ebf297559aa991eda2c75ba71a0f747a09c51b7d03ab419453c8a4fcade7cab48e0883cf072eb7def854cc167efbd502244a42b0bb36fd5a09b2b2bc116efc8b5a78961780115afc6b8b40620a79f9c1f8ac04f1d0e703fdf8276c899c792a223d904d269688c8b10cc1b1a775f71736dea764b4eae64fca17d9125021925dc7e366ebf7e2641faf9c95171926f4b9b42d40a2b933634d549585845b6cb9f3c81335c2c1f86ef18a8a1a006bdbbb3a84f8e3ac62df5c2d99dc121acd868914ae152b1f2a8c40f7c11e22339488aa70b1875960e28ac415c0b210c46c09bff813bfce07f93a66631fcaaa66ac4f15ca406eae2d653e0d44a99a652ef1a7dfdaf10f25535e2b2e52a57e7bcb8fe85192bd6763003a12c3e405e0a1180732177a8d8133347f4cfbefa577b6bf78e1acea1872ff307bceb6d06f2bc554113ac17ecf33d0fc362e31b333fd582589282d282f8411efc1a3f84374c1201c9f639bef826c1887a1d8af5152ed772e3716b39f81a3a2f5efda15252fe961f2a86fe9c5acbe5f4338bf0576280c197bc1fd3d4154e898f51d82bf5d58b00df4ff6a40798316aea4082a4eda48a689f7f5d46cdf3c79b864ba77eaf89d4fb30c868d57b588601a074904d7a41cba83883f6a6cb42a8d2c201bf54073523aacecf7bbf1614553fc42b4d85520a242339a2bce39a72d294b8dfd271f9c490eda8ddb1f23c2cc9901e15413ca73b76102259c2f0054919e2c8d33516261ca157a32800504a10be2b00f73c7a5c53b606d6a332a3152d6f1c14c9f123c911592594caea102646a6f39be9abd254fec1ffee3fa2543998324d32a4a8f4046a5a73661be5dcca614222b677a6b45e5f63c2cd7369ed805e95787858b5d2a33a52b9263dc2ed1681d9a27620d0e91e42d74b58861a434ebf9e7011ffe7fbc6f8fdacec59d30f9c8abcd8ea0752eddbbb8e400700f795412722f1b9084ef3e3cc2600303847efe9f0cdcc6df0b43309c055ef16a727da48e943fc4dee23f4491bbe5cce3a9d1b834a7816924028014f01ff741b603fc65a59e9606a5762815a9c627d69f06e5b1f1ca62ec1d765c289a16530f46698649a8bbb04574c0b041645fc97bcfac2543be79ccad57097459337fec490ebb2a75b6385543a29a47ed66775c24c963f3124502a4f9ba7705754c5bbff9058bc47b52c3089caefca801deda514ee08bda0044a8b888215578d1e5b52162c65a1ff07a1d8722558a4e5f4bc6a75424094e1965972c8bf6d2874cdfab6bdb0b557908f9db1cda9330b3def10fe2c8c6b32312f42fcad3373e2032e05ce80057fdba69194ccdbd50547d72528ce8f09fd39b58e67e8ab6cd792430812a499e4a1a380e8032bfc2b6b9107850857751a9ca6c43414ce3730d9df7b56cadd5619ee0e7230d1d308686a6c1dd6da01dec41205475f8bc3d4a0ecfc4f26e40501fcc6373b4fe7b72d7a6955154b5e9d96f95c3b13bd208d5b78e8998545e2ed351ab3a18e97e3ba5ecc95c49f7bb6e2cc940caac9bcb1a2498087aef788fa8baf65087ad9a4f7e5e32f6e18691ce5b363dc414af8737ebd4f9f0b2c71bc93fec86eb0f9c3e91e2d535cb82b7da9c0b2f53e2cb5eb0fc5cdd96a61d20138aac2401975e4a90f06758692b091f18526204a879ac57dd736914db65506603cb10fed6b2fc06cca628f2e51dc68e76e8879349ceb5ba607d3b683537bb9a53788ea9c0272ebba1424df600422aa367e5bcbcad7a68fb901c1a6a21dfb55af495c53affc34dff583d284e03718d5a5735477c9afecfdabfceda9be10bb5848d9651a09dfbba8466e827d7ddceedfe01c4de5363a43b6202c1cb4251d2e9c5fd6a14eb33e213783fc001dda4a9bdce3a1033fbb70b8ce24d90ffa4c9ef49613a07a2afe2dd4d30422a5110ca1e3090993eb77f49fd3649af54a25a6ba9430a20b8116a7c975a5e4832f82159caa0f42b7b82bbbc3300535aa85e802c4f4fdbeb5a88443e1f1d4114f941a07020fe0a869ae6d0ed758a708fa3956112e0208e5b64126b0a244e17baa07bf5b3c80d6234de1c5fef528cfc4b655ea1243a8698642c09fa6993dea6347e046dcdbf861ad62a1fd2ddd9753811486ec9fce2c96773134187b7f2f361e57b38e50d5293945c04889e01b2f650f377f80b7541a1b03ab42d57c488b928e3fc9c97ec358927d70a8f52306197136ae562de9556f31e8f2c0e7cad8ddc39e245719df91af3522682d176850e4e56b97cb384db3291633ae7e5a58aa7f2afff5ac1863b70b116deea259ee10321b3290e679b1f99d332fee98ec74bbd70eb482ad779f0f10a97b01a8170f0404896205108afbfd36305525a4ee456e64bf9c1865e3b49789937974987519508cbb90c3f1de9b8eb10669a3f45dd21751324b00e01d857f476c24cb6aa403f1ed3c55f967575e6769f292b74ca934afefebb9e2e3a847ca6e261346f5b6ded34f28f92914b9b03eadf99a5824e116a2c14162888a0d7f4f5f1d1c9e517fa01645ac0d54e80045a6db8975f7cf35f40fdb9c3071c7aed194bc01898c25777168a4319a62f64c1dfa7cfeca055b44f896f2d3855b8db7310cffa5af43be8bbe706797c560cafa36dae65f7f7fbcdc139d30da683e1cac6f6588ce8a8826470a45a72a27ed9f6b281e0f53ebd209ab39aab87889b50d6456a0d97d4f7dd4cf26b771f73bd036d395ceac707f1d4f5c55303b88856322ebd497da1ad15964605efd3c8898ab13b182a82e9c34f49e96a2ee2390dd36d5fe7f7e98ba99541be9fca57cec28962587d81ab0ea78a6e1116e78", @generic="847c7cf40977aca94be2076c64b424963ecbe66d3bc82ddbbbcb3997d0a761778e441bbcbf1e566248c533b86f49ca3b9cde9b3b825845d45dc40222e4f8c0571513443dc57cffd756bcce2b1ddfa053855cd9f179fd4343492ccb10ae5208787aa9d328155b2a606b0389228fea74e80b472d855ea277d6e45c3a0aeda785ee79ee1acf5f142c1fc7089cf743034011e8bed40189818c79cd5da39095d7366af0b61e2e81b18dc493c72cb2521bef26e0e3f6b9c5d1c17010649ea7047b101b", @generic="644403cfd8ad34b8ac3a15a720519c709ffeae0dc84f"]}, 0x44a8}, 0x1, 0x0, 0x0, 0x2000}, 0x11) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20008004) r1 = getpgid(0x0) r2 = gettid() r3 = getpgrp(r1) pipe(&(0x7f0000000100)) tgkill(r2, r3, 0x22) syz_open_procfs(r2, 0x0) add_key(&(0x7f0000000280)='id_resolver\x00', 0x0, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) unshare(0x48020200) [ 2504.801678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14547 comm=syz-executor.2 [ 2504.841801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2504.846931] loop1: detected capacity change from 0 to 1536 00:52:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240400001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2504.871864] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:52:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2505.018058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14566 comm=syz-executor.2 00:52:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x20, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x4115, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8, 0x5e5f52a8}, 0x10000, 0x2, 0x2, 0x4, 0xfff, 0x6, 0x7ff, 0x0, 0xffffffc1, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x7}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x44a8, 0x2b, 0x1, 0x70bd29, 0x25dfdbfc, {0x19}, [@generic="d6500191d53bb835823ae41f4d335c6ef926882ac9bc275b2b8cec8974bb4fac6906ab10083f96c59cab572ab37470a0e9e6429ef91b434c3a4bdbc922adab1cea088775eab1bb20324f656614b61ddf3e17d46c26a0a586cae4d9d55c43b4cd3415df441f81988d209e43fbdfa44b9493b95c82c672cd5513c20a0cd62a92f6ee39909899c2ba41af6439b2645a54fc79bb925dd7a3c9afda63bbf4f202a544673bb2a8a402c22c25fb26fabec956b2cc39beb1d7b8a099dfd28140a6b828647887447f7c9709086212204d7132a012272806029465c0d7d7415be07f9b9669b39798900680aad1c9e1c00a5c13da4e8ae3ab9177", @typed={0x4, 0x85}, @nested={0x12b4, 0x50, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @uid=0xee00}, @typed={0x5, 0x7e, 0x0, 0x0, @str='\x00'}, @generic="70337f2cff3a5f09dd5a36059a196f29c837cb4abda2948d65f1b4c068ae001667f63e0f0396be4e19f1c16b2c6434511a58c57b40b4fe308e164e85672514ee014a0f7165664efdd3f2a3fd706c2d1e51e68caf050cb5030bba3720736ff4c145cabe86be85579be871d2478d608cd13874c46a27eb8d8898608dfd6a05013b62b1d4ed19b384f3ce84174404effeb0f8c0a0614e0f52763addb07662df7ccc59337c342700274f8ae6774fb1c52dee124350e0b3e94c02e2cebbd6eb6b8f9d19db53", @generic="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", @generic="cf7ddf2c91a1db3c0f4ea311db7bd0cadd5fbcbe08ff534241cae0c5d55391f549e54cab3dc8d04bc96ad7433f1d6fb010ba476901b1f858b5fd0dbdff474d4d745da2b76cbd10bedddbb355961b0fcd516f751460f99739ffc0296b9f793fb15db9364ba74dee319e24cf3fe865e850ab2fb258a2764050b413b9d827cb83497410e0395a6819a2a021fceea9601d28b62f6035c76106ff6b09aee13c7cd96184c179deb2ef741edc69b04f2ab86efefb7f2d038cf934c0650d9a2d98a6e6033dd081f5437d19debd94531c1aec3fbc78cde08c2125e80d6e6856c69307c5d1e4573ab3dc1db00551b2b5bf", @generic="b5d7739ee04c0458eeac40c73c9ee4b33118964ac051b7b7ce284b74dc9b4ba24942d874167f980a7bfe4b936894d05f0462cadc70ae3c4e2d99a3ea476fd6ec2aab8064a0f9cf5f22935b6a66fa0cb1e66c5b97a2971c9a036c7af61626f625f69088dc8bb0610516d53076be0a6c255bae29d41b0383b3809f2b3b71030d1037b9e777e1d459cadea5d47acb2554628109e65d896365c82f731f00261f5866ab5aa3dea8e33d30be42966572647b1c7205362eeeccff3d3b771e7b744d6f0139d7f13a4ac7a0fde99c9e55d2851342186fadafb6e94672581c559683f6dc595de27ae062252746058d86d15520e24e81"]}, @nested={0x2010, 0x4e, 0x0, 0x1, [@generic="4cf8ab645fd8c67c7bb769e870d8eabd733f08fa749fa52c04d1b415979c66e32ae28d394a1a3196e8d96d71c336a141ff9d70799c6e35e2aff2d5448ead2875fbca03ea8485a966f4acb6a9fb9a08890c6fda23e9d97e09a6865b5c9637f8bdd2c2288ea33a1ab47f94c4a2c3c6c571e3f47470b56d2c8c9d156479425139da3602ba6be7dd1a56c6f44a7ff010c59403591c0692b4a9a5a493497d17bae89405733c50505f3a5bbe7d2c81dd006d6ca6db08fc5a4b66f3fb0e9af5ecfb8e73486de27a4a8ee763393cfca08a1bed8c215ff20d3ce297b5d19c0e6bde3e376e63ee472105522c2996266cd52dbd4f7a25ce6ec2b33bca3fcae72689747bb63e0b05b14626274210bb359289d24084d781d1ba244211c73b9a572119379b9159bb6fbf36fd0199daed69df4e432f424ce768b20f2e8d984a74a56ec18ddd23e0fe776a5005be941eef1d5b2b0b22b4ee46df223d9e60a25a6b465e6c68db53f93fe3e2780436ded6f852c62398341bacefea58734ff4f1d282a7e0397f5e1267bb25cde886340636079c61f8e1d62299df99cc96db961a69845f9834c760e7b1bfaeda81a78c8409c737efb3e312c6997a71ced3f3e77bd55e2af8229804f792633764e5880bad6b09d13e10b3f667b3cef796b7964e129be3d96838128d28fdc4db4669ef113c61947770883603929af06dd4a4ab68b8f5580a466cfb4c16b52580714d6b9678fbfd0c7e8cfcd8f6d2b1103bdf34f2277f4c33530dfd1faf861158c2f56e0ab1c52436f576ebbcaed4712b1c6eece6470c330abe75d2390c9caacae2927253b4df50022b4016aec07262e469ca31107a5da6ca0e5f340a4201e6f143811664dd1d11d42ecf455399c73948dd5718aa63e2a7ac685dc0fe18468e7d24a28e808bd9acf019a47020a011042b9e6956bb16b529dce1f0a50a4c1d63e283501b85fc0f153b0893cfcfe9f32199d2c35a25962a8f229486eadbd0985ca3ff710e0e9bfa6a23cdbbe95d76da87d7a71952b5974a806e4a8062edd19db689637e94b0a5d9902d585848d8222c57e1e1d91e98b7e1f5ddf488421f97980d2cbe2403e6c47672858c246d69b8bd912e7ccc98d18a740a98016a878a4b3f3f948b856e1c5661bc49d4dd28eaacd0e50366ffd706bf836132a2d3b4232a12c3b84d22c01910dd329fdfeb3321b3316a188c96ce3d927ec6778ba0bbcdeccc77132b8ff2732036923853e19fb9e2c3d2a0168693dea0787532ee656ad7ad5437f87edb58b184504b87fbab8d024b00af408c523026cbff7f1ab1a68293019e896f7ca427eada06d38508ec1259f992fd862022b1bedf685574a8716f23c829d60412d6f938fc8e7d55462dbb0687bf83b4164e6600e01ea24a5d4c19fbc5320054bf2e4d59eb9ee7e2662b578486b03782203e14af1a2938296220b82f8ae1da31628866a2a27e18e491d89a08b91209dcffb10c7fbb23a06aa7242964fc1bf4f51305d7453d944548a8b560ee3e1a36d64b21d481b7393a2581e76b51e871ab2c6d5511146754fbd2bad9d747be1a7f985df88b780e69e8790cdb374ad7d9b1dc65f82d4739908b44038778b29f9dddb2f260821af36d6ae64651014f40f31c9595859145a4c4ae6ba9d92219ac1e8053666bc29fbdb85b0afdcde5999ff6ca92d3fea6e5061b01aa5ac85443056382f23aaeb4a24880d1e2e53cf6545adf84410737878edcf03d8443edc509ea0171b45b2a805c1ba43ae5b3062cd44d153da757a5cff1da8c0ebbefcd6dba0cca5e9ebe15ea640e157ac8d20c36a4a2e993bbd33cc311be2f6541bc31efa223ab7badf5bdaefccd31a1ad6a7cb46ba115b5094d0ec0a87925476d2691819f3e83f29c0e65ba6f90be038fc90ba2328cf4a49955e0d2795a4867937dcabf8d7d40528d068ceec8f55d31f05bfdf86edfcc473dbc61de4fef81ee749e7944f00769072ea9fec9b7bb43288daf8a12c4f1df316838607cd87bb0b73ec46f3bad2026f682956d8b50c905f6513f5efd4d2c6fd7cd762785d27df0583af631ef99cb0a0e5728a13b3864cc938d4b1695400f7c76ae822c22d5d8dbb925c384f6d8182d809bc89b15270651232be9aec4725e21f9f090b4db05ad672b3591400977d4fc56c9f987cc9bf159a7c06271606e589539da43e500c46ae29b83b4e4662f379f6fb3dd84faa27913a30db32c54b8cbf9b08d83eef6aa8a4a87e7da25833b2b24c9cc58b40ea1c61c70a4ba408c46d13ed8b1cb5cbea60d77a06abb219028e2c476c4d8698feca39371c9b336fa496f5871b4166c2e90470e41c3c8f605b180e9a846efc9e09a7390ec9698c7dd400bfc5e1a338144074c018bd142107950df28b67d890ce23412b6d5382630c0241ecc5264d7a681f3a4c4d8b12a16a6bc68ab0735c601a0943c656a64152e7bc7727de7744f55e874c9ef119615c4c935deec2f690e0447154342c1ff76c5d436cb34c3162059e1b9ebb5bdcc050cc87091de75605b525499be0871280377daa96d9f8e29c89f6cd2b6f3040288b6b465d2db887388f88849443cc480bfab39c10fbbe177eb6513d693b797e7fb78353fba3dae0bb7044b114ec5303aed06f9d05168cb217127a5e82ed4d85f7127fa99102fdd96c7b5c0cdbb88407276f2c53212767f4a009c7b4e1b08d42dfba3d81df5ea066771c569fbc1e8bbac3f7c61a6c736f3f655af715abfbafd12271a661cc3fe996d80edf0d4c54f9155dde442064584c20b5d5b853c7c79495303e5bd3e65715958f0c66f7750d6b533ae22848688afe9c496a45090152ad908de5a1e823079ab9072190da4b8f27cc1212889ba150f5467ca8addc2c6fa81866fb273f45cc2b75883abaaaabfe207fc2b0259f4e068abeb88e125d18916436759f310a5b37cf6b7cb04d8d09e4a804f181ef7c4e249890a9faace6025fe618805b58451ef8f57a913008c1a28b7e28196bfeb9361b42d3ec0920af9787afbc27bf77ececca832c5a93dc29742d5953ad1d296532f490a207bc8792baf570bf456dc22fdd2822a5ccffb3ff562bf16885a505ca417a5778955676ff34648cf96d2c2b88ccb90024baa63503776305eb753b461385b9bb064ca3f93fe4c65b94d776d0d24cabc489a75ed4729cfed43fd89fd2f2d97d72570c51f56b68592997d29b4d4056f31f6d88d763ec42001c072d0bc9a2a7f8f94df12b62059a643c4bed19b7968e3cb8dde74acbff0799c33a8b630d692c0af268fff059e4e6f98933113d1bfc2a0e79d72ed29756137f47b5895d5ba83229bf0460cb479a2c0b0e09613e153d6b011b3970fe7c011a3e7fed74dd9ec5086b2a57703f4ba78d0e584e78e5f307c72d6148990142cc801eaa3fe3955a0ec6d5bd1fa65150f798a46d71df18638692eb7bd93190412be6774d7cba08f9e31b9b3f915c1e2d2d2acfaa71101909016e2c5b12e8ea179beb97683bd9ccc930af596b27473504c7f0c4f90d0df4d4d7268383278198a0c4f868dd730403d9f1f9a4a064937f03b6331a41b3fa0621a24179d3e97352e1b189e403ed8fa8b5b9b3b62284b88ffd0fe7e1d14e88d37d95e2819fd14cd028be6a93899a1a313a2beeca5d6ea3afae83c6ac2ef368d746e3b03190817556e7cef2524cb4254985747718aac34163db98a8b11fd5ab3b458ebfdce2c62601a5931943c7102be9c9c69e605797d22edaa870b256d6d89c1cd48123d0b2923ad9f7a5ad7e2afeae75311e41ec29d6ab5e6b6df4452fcf14afb546864129cff3ee6aec40b95f03ce94a1bb2b7c15d3ee76437bcc8fddc8124e18dc1105d0c154efdfa8a8e7b3dd1ec24f1ca100371c1999af238b438feb51b9b5fb2275c5bb236e78e54a18962a376a07cbc7259ae4093b6bca692822e0c623a72a1c4a6d54576e69d23472d768ffc0632c98e2794fea42261606ed7119bb217262c3daed2aed937472fddd5679cee6f34fad97dc7546100d84b6285100eb0386d7a35404bd88223b829adbf7933bca10513288acd36ab250281bea2f5f7299dc77967633aaa5502d98c4c84cd164dded77b92ad3e198174ff7559fb429e3705803473e3ee2ae1dd23233ecd239d60538df839cd0a2fc2fb0f12ee09f580a9a9f4f98290afc6df171daa5b9de8d2acce1eef59ab1f5178e1a65fa5a1a9d290bffa2d664fd044fef9081ebba04bb56d74673f66886001d0c6cee00e76099d026896c8df999485ed629cdcdbb37154550709bb8421c271c2af72d42cbf7ae8dbdfcf33790573b253511e317e5e22beaa93f3269bda68b817499297ca592e061f13e9f77bbdb6357863dbd7e42c74dd2ebd0cbddfb22123fb584396c0adb5b5e960d76d2c51975260b087652392c54dadcfd3b7807f773c14e5555d45ed60db4ee1b8a351bfbffc51c3c343bf979c8053c4d92aa1b2eb397b5480f6a1341105efac07f078a67a40a4671d380efa9e5641f6f1260b5e1ee8131e47e513755b980c9c56a700502279acb12133de315d8ed8f11b7ea5b7a7ed7f6aa22fa7b5509c2a98cbec1cbb0c39aaaa75e3d1a760456ff9a500a6e371bdee86042e8c282a0c83b687a54b90ab0da04a21a5c2bd60f1f1134db48a7c044a6ca441e02fd8a5bc50a9706dcd2121005771737d6a1dfb6332f69287f5d6435a178a0ee72f5adf479f37540383a7efb6b512d32113082a1a2a11ddf9fbec7f4fd06a9b900fe3e18f788e70341a3a64570b89ade52022512b56651c4ac7da912a091d5719e7529f28872071985e56c4ee22b1089c8abb7d5ce280ab47cae5be641eb224321ad1334f987af117d87461c570c3845dcc08d0ff7524a6e06e40fadc417db380bd1f084f8eae7027675636a00bcb47f5a58ca8183912af7e31ce87ce9eae32dfd6d328862b9f6a83e1e062fcef58f7efb375cc9e7a02135d9a5ad58dada91fcfde1446984aef2d18e4950e539b11a943fcb0c68a5f10afc07255bf6d09af5c10aeb83d0a9be50cd0453a42e4618a4e9d7e17aa528a6e99c919ed7299e1fed0181f13ef8c232d23f8d6c61a425320a9c9877a104dbb0777bb8be4a9c07d83f2e1971da52c83c1d9bc938f726db16c47774381383797814af455dcab26077d5ed9a49b0a2c0a259996503a8ce47c274fd6770a104abb7a460c72c60edb37b549d3f6b8c29d6fcb782605801a37c7f989095f8eae610ca438d0c9f9975d1eb45a440b81beb9604c91d33105925b8cc8e3d613836cb61f6166f1a6de934a8660298de20567f7faf2b5003ef1cad89262f1f27772547b4b05c90b36cd19dd51704f9823c47abc4b82f38b04159b7af5cbe12ec97d6a878e3c163876027d2171e2f7bcb85848d226b5b8b01194cf6b1f2ae33a410c4615fbb664b287ec28c14f04b9f653cfb3d5ea555bb58525261c4457e2a2c080595f85c82ecadc488409c8584e35f2b187930442acc24b37f2490a9e29b59ef80e963fd176643997dade11f34d7650e93d88e007ef171577dd03977bfac8f7a0ff3d239cad8f6c9395a36f8b0e7e305751b082107ecab4627cc4ee0ad75ddb20d3edae4dc5731384d0eaa1638a99ec401e27f07cd8520b2e50a2e6cc997a665cad141f7d9759aec3309b79e4e1ca29b3abf4d690f9c4476accb6fc8ffdb3495f614a78a53a80e5fd55e98ab7940bc3aac1ecf63d1ca17f97938aa1d5cd1ba0f3c4efe0f26261cbfff1dcf7a84b9f4dd1ccf936ff647d8fada289edb9d89c48617081e4d634ea7e98636d19510ab90e6a9372b565394592e9e9181a46f36c6c1f6e2ed7fdb3f60f", @generic="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", @typed={0x4, 0x86}, @typed={0x8, 0x10, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="3d16982872f5460368b25ac5b7685772d7ca8079fa27bcc735c9c10e5260ff8e1a58a7bf1a38310bc686e1f75e370c20c4f1143080f9096c78328c2029328b9e2627a439624768d8aea6d0d6e50f631872c7037d11a56a7cd47b0062d244a5333487e22f71c94f962d7712daf6342c4386e408986de83fd44d2e69241b85944298bd0f06c4be6b9e014a463be92452c33a8b6c5100fe8a7dd8b675e9a16553b4f000aa1978ed430c4a7ace3c4e57e0ce1304af5e4d8ef98c559c5bfee7d3ad15d8f2cf18cec88609a4d5f44db6b5c708b23c5a3b42dfdcc5eb3c28795d627c9ca4c246dedb7dfd3de5dd0dd15d219fb2ba9ab68210befdcd580ee16a41f00d75093c606b03cb62dafd082d516e6d40d6d9c629a4585432de8d0738bc0737844fdb7007c4e28cd8ad0231e697491b4f3fa44a7bd1b2a602743e33638e525efd8ab9c17e450861d229286e569284e1cc52e1e6115e476f1fd63f55ee9107a49c6bd4a81418b6509c17a3b9828f0a1ca80610890798b3bc95bfbf7f7b198eba852344bb4fe0f74a9cc6cb97c789ef432ec7040a8caf71de9f20066cc3049412e7069365f32a9b946cba26ee73dbb4d1d8f8b3b8db3110ffad12f51ce3b0e0bdf3abe10d973efdd3273ef7d5f35a5b13355328f5a76910732419ebd5d2b91b62eecf46792f97f5a59505e1d59e306e7c276d1367beb5938b33ab42d195386463824738be730dbfc82d85f6dc7050efbd5464b5cdaddfe570dca52202bf486cf949647e386128f4d552779814b41eecce7f4639e5f5f53081af8f42d04e642a1b111f488889f65d7ab47eaa0a09c52c97a90b09320586773d1530af55eb84989a9e0a69790e84548e7387889a1ba5fa5e17743654210f407318d2e165c7d5f009abc25fb84821d0e4c75b46a076da509adb491558ebd0da00b715f857b8f0bc7be254efa843eef7d9b74ec6d642a914f82a5acd97e305d0051040362750461f5a040d8096e74dfa6095da8908f6d9e50c01798fe9a604263da7746d61fa0ee0f056cd1137fb6c277b1225643111bbde6e25285ab2cb2f9680236ebb56be3f95c230176ebe8137a3d7987e26100ee3904432964ce71cc19cb855832151da58239cd22c5784e57ba86b7a817b164f75fe3301fba0d973a307d09a3eb3c18d1280686a240980c4d1732dbf946d4fa1ac86c9cecbbafe0a99b55a470c8d8b744bb53a0cb347699d0952d9171339dca65af1d97077d0921e67d9866d018ec15722dd7eaef2e53d19049b18201a04c8fc10f13f484f0dda89fbc8d359068ea92ec9384d25940b939ef331ad2adf834fe93cd288cdc33a01078b5e16b0f7a3b567494db164ff02e1af9a556c1db3f9b9b65a63c8611596872e9a099020555a052285946a304535dfca9d4ec304720c34eaea510eb75ad89de76c4bc69c18922836a6cdc674b98e4ddd66c4023a495c2e3272106ebae4cf4aef913650e98d9b0ac1eea183f013a4e3261994c3f74c5814ac366c58f0fb22ffedf6efcc8565574dcf6bd7ec024874cf7169499dd57c1351f1fb8fa8d67e8bc735575da7d9016602880610091107892e0cc962e2e03de8fddb63080a9ec280f54982792e7f3915f82512533b3defaf31ba123c2cfe061543df43f15cc5e8d8db334a854aa863ea532d272c025f91d796d1e7757c520310976f5b60e2592fc7101a153146ddd9346fd382d77093373d49855c19d19d3891bf5a61a864259a5424f0ef0d6e3fff19c18fa6640e8ac0cddea9ff7fd0eb66f5d0e0722070b4469e20afa49e06d8fccac424a6653462a6031b8cde46031463efd4d14b9ef82041507153ad6cd4437171ad7551cd147b3a7ab797eaf2cc2b739691e4a6fba2fd80fd4ae74c573b3864ae52238c26c22601331d6c157202f2e9976808addafd155dfa3fff07e96c0c91d2d19186bebfbf453d0cfed82ff525001274e6184a429f5defa5efa982b766018fc256ff00db37f6476571f1eef4affa50656e23465536ddc823d5c2e3d76ab1c7a25660ac5c80cf689caca67745df16b28c00b3f1fbce1990e2308642bc89df8f84e325956d95a19865196def485a17b6dacac55b47e863c95bb05fe287d22cf9e8e137e057570ad86e298c082e8843c816d280e6ac5e979b57da72d3d9d77a0f249a18c04505bfda3c13e051c9e55b4bb401f62f33f79da70ba6eaf5f6fab818561e1efc02f72323ff0ba91a89883c2a2708d81a2e2911c2a952a07a12218579b81779112ce7325fc7e8360f5bad4498993c759bdd1cfe9e1b8ab7db0e1b8411ce0ed6734eb6a4abd8a6c30a24b668c00444a1f579a48f8f2d9e35281883c00ad363879c3b55444015bf846d7904be163cf9c258f0d759f6345c60be735906471fd14610499eabad398c1f60b9537d03b89ee50883db0c969df4094d514646183b9210bd020257479cab926922fa71dd6be8eb2f34301696e1e8939b6e82700fdced1d0098379895846eed8ce08ee770d92cd394a63f2fe50bb8afd6b0917396f53dfe83453d362e6c3f4fef25dce7127f80fbfb1a74cccff45144272fa21acb1f36d867c36a34e72d67c0bc932f8c7772b8c783219c4c4814ef18175989a1feb9ce6ce7a4eff7f06ca8d17166781756592b37eac57285530f6b873de8587709bd40a2a9fd84201a2bfad1bbef710a59e219adce94900615fe8512974d952715355611b670b41e4727179001548b1952ef7a5f2999bb538e286117c0a5deb21139c91f847ef20a776249ce63b15df16f50cdac4325a699ebac41768c6c4a264f953f5ca5c8c81818957623fe735159bbff53dd525d5ff1fd36462e4acf248a34336ae8c6672b777b07d3d6884b69d2d67dff33733776ffbb6b4751c4f792558ac739d8301575a8cb92b130f4b6c7440096a92ef9525ece185ef3810b78056b6bf5a4166890bb0d32e961418d814659f595e491204f263490988d4a488ebf297559aa991eda2c75ba71a0f747a09c51b7d03ab419453c8a4fcade7cab48e0883cf072eb7def854cc167efbd502244a42b0bb36fd5a09b2b2bc116efc8b5a78961780115afc6b8b40620a79f9c1f8ac04f1d0e703fdf8276c899c792a223d904d269688c8b10cc1b1a775f71736dea764b4eae64fca17d9125021925dc7e366ebf7e2641faf9c95171926f4b9b42d40a2b933634d549585845b6cb9f3c81335c2c1f86ef18a8a1a006bdbbb3a84f8e3ac62df5c2d99dc121acd868914ae152b1f2a8c40f7c11e22339488aa70b1875960e28ac415c0b210c46c09bff813bfce07f93a66631fcaaa66ac4f15ca406eae2d653e0d44a99a652ef1a7dfdaf10f25535e2b2e52a57e7bcb8fe85192bd6763003a12c3e405e0a1180732177a8d8133347f4cfbefa577b6bf78e1acea1872ff307bceb6d06f2bc554113ac17ecf33d0fc362e31b333fd582589282d282f8411efc1a3f84374c1201c9f639bef826c1887a1d8af5152ed772e3716b39f81a3a2f5efda15252fe961f2a86fe9c5acbe5f4338bf0576280c197bc1fd3d4154e898f51d82bf5d58b00df4ff6a40798316aea4082a4eda48a689f7f5d46cdf3c79b864ba77eaf89d4fb30c868d57b588601a074904d7a41cba83883f6a6cb42a8d2c201bf54073523aacecf7bbf1614553fc42b4d85520a242339a2bce39a72d294b8dfd271f9c490eda8ddb1f23c2cc9901e15413ca73b76102259c2f0054919e2c8d33516261ca157a32800504a10be2b00f73c7a5c53b606d6a332a3152d6f1c14c9f123c911592594caea102646a6f39be9abd254fec1ffee3fa2543998324d32a4a8f4046a5a73661be5dcca614222b677a6b45e5f63c2cd7369ed805e95787858b5d2a33a52b9263dc2ed1681d9a27620d0e91e42d74b58861a434ebf9e7011ffe7fbc6f8fdacec59d30f9c8abcd8ea0752eddbbb8e400700f795412722f1b9084ef3e3cc2600303847efe9f0cdcc6df0b43309c055ef16a727da48e943fc4dee23f4491bbe5cce3a9d1b834a7816924028014f01ff741b603fc65a59e9606a5762815a9c627d69f06e5b1f1ca62ec1d765c289a16530f46698649a8bbb04574c0b041645fc97bcfac2543be79ccad57097459337fec490ebb2a75b6385543a29a47ed66775c24c963f3124502a4f9ba7705754c5bbff9058bc47b52c3089caefca801deda514ee08bda0044a8b888215578d1e5b52162c65a1ff07a1d8722558a4e5f4bc6a75424094e1965972c8bf6d2874cdfab6bdb0b557908f9db1cda9330b3def10fe2c8c6b32312f42fcad3373e2032e05ce80057fdba69194ccdbd50547d72528ce8f09fd39b58e67e8ab6cd792430812a499e4a1a380e8032bfc2b6b9107850857751a9ca6c43414ce3730d9df7b56cadd5619ee0e7230d1d308686a6c1dd6da01dec41205475f8bc3d4a0ecfc4f26e40501fcc6373b4fe7b72d7a6955154b5e9d96f95c3b13bd208d5b78e8998545e2ed351ab3a18e97e3ba5ecc95c49f7bb6e2cc940caac9bcb1a2498087aef788fa8baf65087ad9a4f7e5e32f6e18691ce5b363dc414af8737ebd4f9f0b2c71bc93fec86eb0f9c3e91e2d535cb82b7da9c0b2f53e2cb5eb0fc5cdd96a61d20138aac2401975e4a90f06758692b091f18526204a879ac57dd736914db65506603cb10fed6b2fc06cca628f2e51dc68e76e8879349ceb5ba607d3b683537bb9a53788ea9c0272ebba1424df600422aa367e5bcbcad7a68fb901c1a6a21dfb55af495c53affc34dff583d284e03718d5a5735477c9afecfdabfceda9be10bb5848d9651a09dfbba8466e827d7ddceedfe01c4de5363a43b6202c1cb4251d2e9c5fd6a14eb33e213783fc001dda4a9bdce3a1033fbb70b8ce24d90ffa4c9ef49613a07a2afe2dd4d30422a5110ca1e3090993eb77f49fd3649af54a25a6ba9430a20b8116a7c975a5e4832f82159caa0f42b7b82bbbc3300535aa85e802c4f4fdbeb5a88443e1f1d4114f941a07020fe0a869ae6d0ed758a708fa3956112e0208e5b64126b0a244e17baa07bf5b3c80d6234de1c5fef528cfc4b655ea1243a8698642c09fa6993dea6347e046dcdbf861ad62a1fd2ddd9753811486ec9fce2c96773134187b7f2f361e57b38e50d5293945c04889e01b2f650f377f80b7541a1b03ab42d57c488b928e3fc9c97ec358927d70a8f52306197136ae562de9556f31e8f2c0e7cad8ddc39e245719df91af3522682d176850e4e56b97cb384db3291633ae7e5a58aa7f2afff5ac1863b70b116deea259ee10321b3290e679b1f99d332fee98ec74bbd70eb482ad779f0f10a97b01a8170f0404896205108afbfd36305525a4ee456e64bf9c1865e3b49789937974987519508cbb90c3f1de9b8eb10669a3f45dd21751324b00e01d857f476c24cb6aa403f1ed3c55f967575e6769f292b74ca934afefebb9e2e3a847ca6e261346f5b6ded34f28f92914b9b03eadf99a5824e116a2c14162888a0d7f4f5f1d1c9e517fa01645ac0d54e80045a6db8975f7cf35f40fdb9c3071c7aed194bc01898c25777168a4319a62f64c1dfa7cfeca055b44f896f2d3855b8db7310cffa5af43be8bbe706797c560cafa36dae65f7f7fbcdc139d30da683e1cac6f6588ce8a8826470a45a72a27ed9f6b281e0f53ebd209ab39aab87889b50d6456a0d97d4f7dd4cf26b771f73bd036d395ceac707f1d4f5c55303b88856322ebd497da1ad15964605efd3c8898ab13b182a82e9c34f49e96a2ee2390dd36d5fe7f7e98ba99541be9fca57cec28962587d81ab0ea78a6e1116e78", @generic="847c7cf40977aca94be2076c64b424963ecbe66d3bc82ddbbbcb3997d0a761778e441bbcbf1e566248c533b86f49ca3b9cde9b3b825845d45dc40222e4f8c0571513443dc57cffd756bcce2b1ddfa053855cd9f179fd4343492ccb10ae5208787aa9d328155b2a606b0389228fea74e80b472d855ea277d6e45c3a0aeda785ee79ee1acf5f142c1fc7089cf743034011e8bed40189818c79cd5da39095d7366af0b61e2e81b18dc493c72cb2521bef26e0e3f6b9c5d1c17010649ea7047b101b", @generic="644403cfd8ad34b8ac3a15a720519c709ffeae0dc84f"]}, 0x44a8}, 0x1, 0x0, 0x0, 0x2000}, 0x11) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20008004) r1 = getpgid(0x0) r2 = gettid() r3 = getpgrp(r1) pipe(&(0x7f0000000100)) tgkill(r2, r3, 0x22) syz_open_procfs(r2, 0x0) add_key(&(0x7f0000000280)='id_resolver\x00', 0x0, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) unshare(0x48020200) 00:52:21 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x9400}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2505.078228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:52:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:52:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240500001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2518.361747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14595 comm=syz-executor.2 00:52:35 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 41) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:52:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030004800000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:52:35 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20100000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:52:35 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:52:35 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x94000000}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:52:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x20, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x4115, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8, 0x5e5f52a8}, 0x10000, 0x2, 0x2, 0x4, 0xfff, 0x6, 0x7ff, 0x0, 0xffffffc1, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x7}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2518.373258] loop1: detected capacity change from 0 to 1536 [ 2518.379430] FAULT_INJECTION: forcing a failure. [ 2518.379430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2518.381048] CPU: 1 PID: 14597 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2518.381957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2518.383071] Call Trace: [ 2518.383444] dump_stack+0x107/0x167 [ 2518.383931] should_fail.cold+0x5/0xa [ 2518.384439] _copy_from_user+0x2e/0x1b0 [ 2518.384974] __copy_msghdr_from_user+0x91/0x4b0 [ 2518.385583] ? __ia32_sys_shutdown+0x80/0x80 [ 2518.386168] ? udp_v6_push_pending_frames+0x360/0x360 [ 2518.386850] ? inet6_sendmsg+0xbd/0x140 [ 2518.387394] ? inet6_compat_ioctl+0x320/0x320 [ 2518.387982] ? __sock_sendmsg+0x55/0x190 [ 2518.388523] sendmsg_copy_msghdr+0xa1/0x160 [ 2518.389081] ? do_recvmmsg+0x6d0/0x6d0 [ 2518.389589] ? __lock_acquire+0x1657/0x5b00 [ 2518.390150] ___sys_sendmsg+0xc6/0x170 [ 2518.390651] ? sendmsg_copy_msghdr+0x160/0x160 [ 2518.391246] ? __fget_files+0x2cf/0x520 [ 2518.391772] ? lock_acquire+0x197/0x470 [ 2518.392286] ? find_held_lock+0x2c/0x110 [ 2518.392812] ? __might_fault+0xd3/0x180 [ 2518.393324] ? lock_downgrade+0x6d0/0x6d0 [ 2518.393871] __sys_sendmmsg+0x195/0x470 [ 2518.394386] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2518.394943] ? lock_downgrade+0x6d0/0x6d0 [ 2518.395504] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2518.396124] ? wait_for_completion_io+0x270/0x270 [ 2518.396746] ? rcu_read_lock_any_held+0x75/0xa0 [ 2518.397343] ? vfs_write+0x354/0xb10 [ 2518.397821] ? fput_many+0x2f/0x1a0 [ 2518.398287] ? ksys_write+0x1a9/0x260 [ 2518.398780] ? __ia32_sys_read+0xb0/0xb0 [ 2518.399314] __x64_sys_sendmmsg+0x99/0x100 [ 2518.399861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2518.400525] do_syscall_64+0x33/0x40 [ 2518.401005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2518.401667] RIP: 0033:0x7fb085b27b19 [ 2518.402148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2518.404518] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2518.405501] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2518.406424] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2518.407347] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.408283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2518.409192] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2518.410470] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x44a8, 0x2b, 0x1, 0x70bd29, 0x25dfdbfc, {0x19}, [@generic="d6500191d53bb835823ae41f4d335c6ef926882ac9bc275b2b8cec8974bb4fac6906ab10083f96c59cab572ab37470a0e9e6429ef91b434c3a4bdbc922adab1cea088775eab1bb20324f656614b61ddf3e17d46c26a0a586cae4d9d55c43b4cd3415df441f81988d209e43fbdfa44b9493b95c82c672cd5513c20a0cd62a92f6ee39909899c2ba41af6439b2645a54fc79bb925dd7a3c9afda63bbf4f202a544673bb2a8a402c22c25fb26fabec956b2cc39beb1d7b8a099dfd28140a6b828647887447f7c9709086212204d7132a012272806029465c0d7d7415be07f9b9669b39798900680aad1c9e1c00a5c13da4e8ae3ab9177", @typed={0x4, 0x85}, @nested={0x12b4, 0x50, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @uid=0xee00}, @typed={0x5, 0x7e, 0x0, 0x0, @str='\x00'}, @generic="70337f2cff3a5f09dd5a36059a196f29c837cb4abda2948d65f1b4c068ae001667f63e0f0396be4e19f1c16b2c6434511a58c57b40b4fe308e164e85672514ee014a0f7165664efdd3f2a3fd706c2d1e51e68caf050cb5030bba3720736ff4c145cabe86be85579be871d2478d608cd13874c46a27eb8d8898608dfd6a05013b62b1d4ed19b384f3ce84174404effeb0f8c0a0614e0f52763addb07662df7ccc59337c342700274f8ae6774fb1c52dee124350e0b3e94c02e2cebbd6eb6b8f9d19db53", @generic="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", @generic="cf7ddf2c91a1db3c0f4ea311db7bd0cadd5fbcbe08ff534241cae0c5d55391f549e54cab3dc8d04bc96ad7433f1d6fb010ba476901b1f858b5fd0dbdff474d4d745da2b76cbd10bedddbb355961b0fcd516f751460f99739ffc0296b9f793fb15db9364ba74dee319e24cf3fe865e850ab2fb258a2764050b413b9d827cb83497410e0395a6819a2a021fceea9601d28b62f6035c76106ff6b09aee13c7cd96184c179deb2ef741edc69b04f2ab86efefb7f2d038cf934c0650d9a2d98a6e6033dd081f5437d19debd94531c1aec3fbc78cde08c2125e80d6e6856c69307c5d1e4573ab3dc1db00551b2b5bf", @generic="b5d7739ee04c0458eeac40c73c9ee4b33118964ac051b7b7ce284b74dc9b4ba24942d874167f980a7bfe4b936894d05f0462cadc70ae3c4e2d99a3ea476fd6ec2aab8064a0f9cf5f22935b6a66fa0cb1e66c5b97a2971c9a036c7af61626f625f69088dc8bb0610516d53076be0a6c255bae29d41b0383b3809f2b3b71030d1037b9e777e1d459cadea5d47acb2554628109e65d896365c82f731f00261f5866ab5aa3dea8e33d30be42966572647b1c7205362eeeccff3d3b771e7b744d6f0139d7f13a4ac7a0fde99c9e55d2851342186fadafb6e94672581c559683f6dc595de27ae062252746058d86d15520e24e81"]}, @nested={0x2010, 0x4e, 0x0, 0x1, [@generic="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", @generic="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", @typed={0x4, 0x86}, @typed={0x8, 0x10, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="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", @generic="847c7cf40977aca94be2076c64b424963ecbe66d3bc82ddbbbcb3997d0a761778e441bbcbf1e566248c533b86f49ca3b9cde9b3b825845d45dc40222e4f8c0571513443dc57cffd756bcce2b1ddfa053855cd9f179fd4343492ccb10ae5208787aa9d328155b2a606b0389228fea74e80b472d855ea277d6e45c3a0aeda785ee79ee1acf5f142c1fc7089cf743034011e8bed40189818c79cd5da39095d7366af0b61e2e81b18dc493c72cb2521bef26e0e3f6b9c5d1c17010649ea7047b101b", @generic="644403cfd8ad34b8ac3a15a720519c709ffeae0dc84f"]}, 0x44a8}, 0x1, 0x0, 0x0, 0x2000}, 0x11) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20008004) r1 = getpgid(0x0) r2 = gettid() r3 = getpgrp(r1) pipe(&(0x7f0000000100)) tgkill(r2, r3, 0x22) syz_open_procfs(r2, 0x0) add_key(&(0x7f0000000280)='id_resolver\x00', 0x0, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) unshare(0x48020200) 00:52:35 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 42) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:52:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240600001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2518.531407] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:52:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030008800000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:52:35 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x40000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2518.596906] FAULT_INJECTION: forcing a failure. [ 2518.596906] name failslab, interval 1, probability 0, space 0, times 0 [ 2518.599530] CPU: 0 PID: 14610 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2518.601100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2518.602973] Call Trace: [ 2518.603584] dump_stack+0x107/0x167 [ 2518.604289] loop1: detected capacity change from 0 to 1536 [ 2518.604416] should_fail.cold+0x5/0xa [ 2518.605941] should_failslab+0x5/0x20 [ 2518.606805] __kmalloc_node_track_caller+0x74/0x3b0 [ 2518.607945] ? alloc_skb_with_frags+0x92/0x570 [ 2518.608982] __alloc_skb+0xb1/0x5b0 [ 2518.609818] alloc_skb_with_frags+0x92/0x570 [ 2518.609838] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2518.610824] sock_alloc_send_pskb+0x7af/0x930 [ 2518.610860] ? sk_alloc+0x350/0x350 [ 2518.613667] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2518.614845] ? lock_chain_count+0x20/0x20 [ 2518.615786] ? lock_chain_count+0x20/0x20 [ 2518.616724] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2518.617873] ? ip_frag_init+0x350/0x350 [ 2518.618788] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2518.619882] ? ip6_mtu+0x1e9/0x3d0 [ 2518.620687] ? ip6_setup_cork+0xfb7/0x1740 [ 2518.621645] ip6_make_skb+0x2df/0x4e0 [ 2518.622510] ? ip_frag_init+0x350/0x350 [ 2518.623432] ? ip_frag_init+0x350/0x350 [ 2518.624345] ? ip6_push_pending_frames+0xf0/0xf0 [ 2518.625421] ? ip6_dst_hoplimit+0x199/0x440 [ 2518.626395] ? lock_downgrade+0x6d0/0x6d0 [ 2518.627357] udpv6_sendmsg+0x2128/0x2b40 [ 2518.628286] ? ip_frag_init+0x350/0x350 [ 2518.629199] ? udp_v6_push_pending_frames+0x360/0x360 [ 2518.630402] ? lock_acquire+0x197/0x470 [ 2518.631319] ? find_held_lock+0x2c/0x110 [ 2518.632259] ? sock_has_perm+0x1ea/0x280 [ 2518.633212] ? __import_iovec+0x458/0x590 [ 2518.634161] ? udp_v6_push_pending_frames+0x360/0x360 [ 2518.635342] inet6_sendmsg+0x105/0x140 [ 2518.636232] ? inet6_compat_ioctl+0x320/0x320 [ 2518.637251] __sock_sendmsg+0xf2/0x190 [ 2518.638145] ____sys_sendmsg+0x334/0x870 [ 2518.639076] ? sock_write_iter+0x3d0/0x3d0 [ 2518.640046] ? do_recvmmsg+0x6d0/0x6d0 [ 2518.640941] ? __lock_acquire+0x1657/0x5b00 [ 2518.641934] ___sys_sendmsg+0xf3/0x170 [ 2518.642819] ? sendmsg_copy_msghdr+0x160/0x160 [ 2518.643872] ? __fget_files+0x2cf/0x520 [ 2518.644778] ? lock_acquire+0x197/0x470 [ 2518.645678] ? find_held_lock+0x2c/0x110 [ 2518.646600] ? __might_fault+0xd3/0x180 [ 2518.647520] ? lock_downgrade+0x6d0/0x6d0 [ 2518.648474] __sys_sendmmsg+0x195/0x470 [ 2518.649378] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2518.650354] ? lock_downgrade+0x6d0/0x6d0 [ 2518.651321] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2518.652415] ? wait_for_completion_io+0x270/0x270 [ 2518.653509] ? rcu_read_lock_any_held+0x75/0xa0 [ 2518.654559] ? vfs_write+0x354/0xb10 [ 2518.655407] ? fput_many+0x2f/0x1a0 [ 2518.656229] ? ksys_write+0x1a9/0x260 [ 2518.657094] ? __ia32_sys_read+0xb0/0xb0 [ 2518.658010] __x64_sys_sendmmsg+0x99/0x100 [ 2518.658959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2518.660126] do_syscall_64+0x33/0x40 [ 2518.660963] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2518.662121] RIP: 0033:0x7fb085b27b19 [ 2518.662955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2518.667028] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2518.668714] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2518.670286] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2518.671863] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.673430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2518.674993] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:52:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030007c00000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2518.702919] 9pnet: Insufficient options for proto=fd 00:52:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240700001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2518.714115] loop1: detected capacity change from 0 to 1536 [ 2518.717661] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:52:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:52:35 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xffffff7f}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:52:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300fdef0000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2518.745473] 9pnet: Insufficient options for proto=fd [ 2518.758757] loop1: detected capacity change from 0 to 1536 [ 2518.762209] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:52:35 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x100000001) [ 2518.807082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14631 comm=syz-executor.2 00:52:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300effd0000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:52:35 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 43) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:52:35 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8cffffff, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2518.940232] FAULT_INJECTION: forcing a failure. [ 2518.940232] name failslab, interval 1, probability 0, space 0, times 0 [ 2518.941942] CPU: 1 PID: 14641 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2518.942817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2518.943822] Call Trace: [ 2518.944137] dump_stack+0x107/0x167 [ 2518.944562] should_fail.cold+0x5/0xa [ 2518.945011] ? create_object.isra.0+0x3a/0xa30 [ 2518.945542] should_failslab+0x5/0x20 [ 2518.945986] kmem_cache_alloc+0x5b/0x310 [ 2518.946080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2518.946473] create_object.isra.0+0x3a/0xa30 [ 2518.948836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2518.949453] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2518.950051] ? alloc_skb_with_frags+0x92/0x570 [ 2518.950609] __alloc_skb+0xb1/0x5b0 [ 2518.951060] alloc_skb_with_frags+0x92/0x570 [ 2518.951605] sock_alloc_send_pskb+0x7af/0x930 [ 2518.952151] ? sk_alloc+0x350/0x350 [ 2518.952594] ? perf_trace_lock+0xac/0x490 [ 2518.953092] ? lock_chain_count+0x20/0x20 [ 2518.953585] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2518.954195] ? ip_frag_init+0x350/0x350 [ 2518.954682] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2518.955261] ? ip6_mtu+0x1e9/0x3d0 [ 2518.955691] ? ip6_setup_cork+0xfb7/0x1740 [ 2518.956201] ip6_make_skb+0x2df/0x4e0 [ 2518.956648] ? ip_frag_init+0x350/0x350 [ 2518.957130] ? ip_frag_init+0x350/0x350 [ 2518.957598] ? ip6_push_pending_frames+0xf0/0xf0 [ 2518.958172] ? ip6_dst_hoplimit+0x199/0x440 [ 2518.958687] ? lock_downgrade+0x6d0/0x6d0 [ 2518.959193] udpv6_sendmsg+0x2128/0x2b40 [ 2518.959697] ? ip_frag_init+0x350/0x350 [ 2518.960181] ? udp_v6_push_pending_frames+0x360/0x360 [ 2518.960801] ? perf_event_task_disable+0x390/0x390 [ 2518.961390] ? __lockdep_reset_lock+0x180/0x180 [ 2518.961933] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2518.962509] ? lock_acquire+0x197/0x470 [ 2518.962974] ? find_held_lock+0x2c/0x110 [ 2518.963477] ? sock_has_perm+0x1ea/0x280 [ 2518.963980] ? __import_iovec+0x458/0x590 [ 2518.964482] ? udp_v6_push_pending_frames+0x360/0x360 [ 2518.965103] inet6_sendmsg+0x105/0x140 [ 2518.965570] ? inet6_compat_ioctl+0x320/0x320 [ 2518.966105] __sock_sendmsg+0xf2/0x190 [ 2518.966573] ____sys_sendmsg+0x334/0x870 [ 2518.967063] ? sock_write_iter+0x3d0/0x3d0 [ 2518.967574] ? do_recvmmsg+0x6d0/0x6d0 [ 2518.968041] ? __lock_acquire+0x1657/0x5b00 [ 2518.968569] ___sys_sendmsg+0xf3/0x170 [ 2518.969036] ? sendmsg_copy_msghdr+0x160/0x160 [ 2518.969582] ? __lockdep_reset_lock+0x180/0x180 [ 2518.970144] ? lock_acquire+0x197/0x470 [ 2518.970624] ? find_held_lock+0x2c/0x110 [ 2518.971117] ? __might_fault+0xd3/0x180 [ 2518.971601] ? lock_downgrade+0x6d0/0x6d0 [ 2518.972097] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2518.972756] __sys_sendmmsg+0x195/0x470 [ 2518.973233] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2518.973750] ? lock_downgrade+0x6d0/0x6d0 [ 2518.974255] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2518.974837] ? wait_for_completion_io+0x270/0x270 [ 2518.975431] ? rcu_read_lock_any_held+0x75/0xa0 [ 2518.975985] ? vfs_write+0x354/0xb10 [ 2518.976434] ? fput_many+0x2f/0x1a0 [ 2518.976872] ? ksys_write+0x1a9/0x260 [ 2518.977330] ? __ia32_sys_read+0xb0/0xb0 [ 2518.977819] __x64_sys_sendmmsg+0x99/0x100 [ 2518.978330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2518.978946] do_syscall_64+0x33/0x40 [ 2518.979401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2518.980012] RIP: 0033:0x7fb085b27b19 [ 2518.980461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2518.982665] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2518.983594] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2518.984449] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2518.985307] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.986166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2518.987031] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2519.097141] loop1: detected capacity change from 0 to 1536 [ 2519.120715] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:52:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240800001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2532.177831] loop1: detected capacity change from 0 to 1536 [ 2532.181241] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:52:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719c"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:52:49 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 44) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:52:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000800000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:52:49 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:52:49 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x9400000000000000}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:52:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xc0ed0000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:52:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r0, &(0x7f0000000340)=""/188, 0xbc) getdents64(r0, 0x0, 0x0) 00:52:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000002000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2532.202968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14659 comm=syz-executor.2 [ 2532.237950] FAULT_INJECTION: forcing a failure. [ 2532.237950] name failslab, interval 1, probability 0, space 0, times 0 [ 2532.239314] CPU: 0 PID: 14662 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2532.240144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2532.241133] Call Trace: [ 2532.241450] dump_stack+0x107/0x167 [ 2532.241889] should_fail.cold+0x5/0xa [ 2532.242344] ? __alloc_skb+0x6d/0x5b0 [ 2532.242797] should_failslab+0x5/0x20 [ 2532.243249] kmem_cache_alloc_node+0x55/0x330 [ 2532.243793] ? fib6_table_lookup+0x636/0xaf0 [ 2532.244316] __alloc_skb+0x6d/0x5b0 [ 2532.244750] alloc_skb_with_frags+0x92/0x570 [ 2532.245276] ? mark_lock+0xf5/0x2df0 [ 2532.245723] ? mark_lock+0xf5/0x2df0 [ 2532.246169] sock_alloc_send_pskb+0x7af/0x930 [ 2532.246708] ? sk_alloc+0x350/0x350 [ 2532.247145] ? find_held_lock+0x2c/0x110 [ 2532.247643] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2532.248273] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2532.248876] ? rawv6_exit+0x20/0x20 [ 2532.249311] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2532.249881] ? ip6_mtu+0x1e9/0x3d0 [ 2532.250299] ? ip6_setup_cork+0xfb7/0x1740 [ 2532.250799] ip6_append_data+0x1e6/0x330 [ 2532.251277] ? rawv6_exit+0x20/0x20 [ 2532.251723] ? rawv6_exit+0x20/0x20 [ 2532.252157] icmp6_send+0x1250/0x1f30 [ 2532.252616] ? icmpv6_push_pending_frames+0x470/0x470 [ 2532.253220] ? find_held_lock+0x2c/0x110 [ 2532.253718] ? ip6_dst_hoplimit+0x440/0x440 [ 2532.254230] ip6_pkt_drop+0x3d2/0x7f0 [ 2532.254679] ? ip6_pkt_discard+0x20/0x20 [ 2532.255161] ip6_local_out+0x29f/0x4c0 [ 2532.255635] ip6_send_skb+0x117/0x460 [ 2532.256085] udp_v6_send_skb+0x7b7/0x1620 [ 2532.256578] udpv6_sendmsg+0x216b/0x2b40 [ 2532.257060] ? ip_frag_init+0x350/0x350 [ 2532.257534] ? udp_v6_push_pending_frames+0x360/0x360 [ 2532.258155] ? lock_acquire+0x197/0x470 [ 2532.258622] ? find_held_lock+0x2c/0x110 [ 2532.259109] ? sock_has_perm+0x1ea/0x280 [ 2532.259610] ? __import_iovec+0x458/0x590 [ 2532.260105] ? udp_v6_push_pending_frames+0x360/0x360 [ 2532.260723] inet6_sendmsg+0x105/0x140 [ 2532.261182] ? inet6_compat_ioctl+0x320/0x320 [ 2532.261711] __sock_sendmsg+0xf2/0x190 [ 2532.262170] ____sys_sendmsg+0x334/0x870 [ 2532.262654] ? sock_write_iter+0x3d0/0x3d0 [ 2532.263154] ? do_recvmmsg+0x6d0/0x6d0 [ 2532.263622] ? __lock_acquire+0x1657/0x5b00 [ 2532.264131] ___sys_sendmsg+0xf3/0x170 [ 2532.264587] ? sendmsg_copy_msghdr+0x160/0x160 [ 2532.265127] ? __fget_files+0x2cf/0x520 [ 2532.265599] ? lock_acquire+0x197/0x470 [ 2532.266068] ? find_held_lock+0x2c/0x110 [ 2532.266544] ? __might_fault+0xd3/0x180 [ 2532.267005] ? lock_downgrade+0x6d0/0x6d0 [ 2532.267506] __sys_sendmmsg+0x195/0x470 [ 2532.267975] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2532.268476] ? lock_downgrade+0x6d0/0x6d0 [ 2532.268977] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2532.269540] ? wait_for_completion_io+0x270/0x270 [ 2532.270106] ? rcu_read_lock_any_held+0x75/0xa0 [ 2532.270650] ? vfs_write+0x354/0xb10 [ 2532.271086] ? fput_many+0x2f/0x1a0 [ 2532.271519] ? ksys_write+0x1a9/0x260 [ 2532.271986] ? __ia32_sys_read+0xb0/0xb0 [ 2532.272463] __x64_sys_sendmmsg+0x99/0x100 [ 2532.272965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2532.273562] do_syscall_64+0x33/0x40 [ 2532.273998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2532.274594] RIP: 0033:0x7fb085b27b19 [ 2532.275027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2532.277182] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2532.278064] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2532.278897] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2532.279740] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2532.280570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2532.281403] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:52:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r0, &(0x7f0000000340)=""/188, 0xbc) getdents64(r0, 0x0, 0x0) [ 2532.295006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:52:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240900001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2532.296845] 9pnet: Insufficient options for proto=fd [ 2532.315957] loop1: detected capacity change from 0 to 1536 00:52:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719c"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2532.342574] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:52:49 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:52:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240f00001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2532.400229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14696 comm=syz-executor.2 00:52:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x11, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x40000000}) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf2511000000300001800600010002000000090006006e6f6e65000000000600010002000000060004004e20000008000500030000003c00028008000800ff010000080004004000000008000400c2cb000006000f00d700000005000d0000000000080003000400000008000400010100000800060000000100"], 0x88}, 0x1, 0x0, 0x0, 0x4004804}, 0x800) 00:52:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xf6ffffff, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2532.465203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14707 comm=syz-executor.0 [ 2532.468191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2532.473283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14708 comm=syz-executor.0 00:53:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000001000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:02 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 45) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:53:02 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xffffff7f00000000}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:53:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="244800001200215f0000000070e600000a"], 0x24}}, 0x0) 00:53:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xffff0000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:53:02 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sync_file_range(r5, 0x0, 0x80, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:53:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719c"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:53:02 executing program 0: shmdt(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="08000000000000002c2f66696c653000c0e0e0bd291a8c7332b80eb2880a6601ce54456a557e5d3d3fed423465ea75d5dfe696a8fa4fad180eab92e21cf60d0000656268a611b6948aba5f015d810577c24a5731818a581d2666a411ff9556b54606f4922753dae9723fe03ddf6e4605a53835c135d9534e7474ee25e3ccf8930b11a91aa96cc227e783ecbb0de75ce2bc610d59d8f3b9"]) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x300, 0x70bd29, 0x1, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0xf0, 0x2d, 0x4, 0x70bd29, 0x25dfdbfb, {0x20}, [@typed={0x8, 0x40, 0x0, 0x0, @fd=r0}, @typed={0xa, 0x35, 0x0, 0x0, @str='wpan3\x00'}, @generic="aeb0584cd5de331a3371b2d779211fad2517d87fe3bb05af38db23e195c9e911e7b6cc81da8444c0390bf1d7c0", @typed={0x86, 0x43, 0x0, 0x0, @binary="f8ddd31ae19a7a624f40df9d8749123bf63d45f5e41b527c76a0667a09252b1ebbd8b97907f7657bf9831775fdd4609063fcace83740208625fd2e4982ff639af6556902f2f186383d1b02e7b69b13c8f586d0158e2b5fb6fe40a2b43428b28469d1a5d5f41a888123a5226570d8aaffea60125b0ab97e568a7bda35366a7e2fea81"}, @generic="07b056ef41a59b2d7042", @typed={0x8, 0x57, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0xf0}}, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000440)={0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) [ 2545.364495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14723 comm=syz-executor.2 [ 2545.374626] FAULT_INJECTION: forcing a failure. [ 2545.374626] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.376203] CPU: 1 PID: 14720 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2545.377140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.378262] Call Trace: [ 2545.378629] dump_stack+0x107/0x167 [ 2545.379130] should_fail.cold+0x5/0xa [ 2545.379671] ? create_object.isra.0+0x3a/0xa30 [ 2545.380290] should_failslab+0x5/0x20 [ 2545.380807] kmem_cache_alloc+0x5b/0x310 [ 2545.381356] ? mark_lock+0xf5/0x2df0 [ 2545.381866] create_object.isra.0+0x3a/0xa30 [ 2545.382453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2545.383144] kmem_cache_alloc_node+0x169/0x330 [ 2545.383774] __alloc_skb+0x6d/0x5b0 [ 2545.384269] alloc_skb_with_frags+0x92/0x570 [ 2545.384853] ? mark_lock+0xf5/0x2df0 [ 2545.385362] ? mark_lock+0xf5/0x2df0 [ 2545.385864] sock_alloc_send_pskb+0x7af/0x930 [ 2545.386476] ? sk_alloc+0x350/0x350 [ 2545.386963] ? find_held_lock+0x2c/0x110 [ 2545.387526] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2545.388252] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2545.388944] ? rawv6_exit+0x20/0x20 [ 2545.389450] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2545.390097] ? ip6_mtu+0x1e9/0x3d0 [ 2545.390582] ? ip6_setup_cork+0xfb7/0x1740 [ 2545.391153] ip6_append_data+0x1e6/0x330 [ 2545.391701] ? rawv6_exit+0x20/0x20 [ 2545.392193] ? rawv6_exit+0x20/0x20 [ 2545.392684] icmp6_send+0x1250/0x1f30 [ 2545.393194] ? icmpv6_push_pending_frames+0x470/0x470 [ 2545.393873] ? find_held_lock+0x2c/0x110 [ 2545.394423] ? ip6_dst_hoplimit+0x440/0x440 [ 2545.395003] ip6_pkt_drop+0x3d2/0x7f0 [ 2545.395501] ? ip6_pkt_discard+0x20/0x20 [ 2545.396055] ip6_local_out+0x29f/0x4c0 [ 2545.396576] ip6_send_skb+0x117/0x460 [ 2545.397099] udp_v6_send_skb+0x7b7/0x1620 [ 2545.397674] udpv6_sendmsg+0x216b/0x2b40 [ 2545.398227] ? ip_frag_init+0x350/0x350 [ 2545.398759] ? udp_v6_push_pending_frames+0x360/0x360 [ 2545.399464] ? perf_event_task_disable+0x390/0x390 [ 2545.400143] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2545.400790] ? lock_acquire+0x197/0x470 [ 2545.401317] ? find_held_lock+0x2c/0x110 [ 2545.401869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2545.402564] ? sock_has_perm+0x1ea/0x280 [ 2545.403126] ? __import_iovec+0x458/0x590 [ 2545.403680] ? udp_v6_push_pending_frames+0x360/0x360 [ 2545.404381] inet6_sendmsg+0x105/0x140 [ 2545.404902] ? inet6_compat_ioctl+0x320/0x320 [ 2545.405500] __sock_sendmsg+0xf2/0x190 [ 2545.406025] ____sys_sendmsg+0x334/0x870 [ 2545.406581] ? sock_write_iter+0x3d0/0x3d0 [ 2545.407151] ? do_recvmmsg+0x6d0/0x6d0 [ 2545.407682] ? __lock_acquire+0x1657/0x5b00 [ 2545.408266] ___sys_sendmsg+0xf3/0x170 [ 2545.408784] ? sendmsg_copy_msghdr+0x160/0x160 [ 2545.409394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2545.410087] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2545.410688] ? trace_hardirqs_on+0x5b/0x180 [ 2545.411266] ? lock_acquire+0x197/0x470 [ 2545.411801] ? find_held_lock+0x2c/0x110 [ 2545.412338] ? __might_fault+0xd3/0x180 [ 2545.412865] ? lock_downgrade+0x6d0/0x6d0 [ 2545.413428] __sys_sendmmsg+0x195/0x470 [ 2545.413948] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2545.414513] ? lock_downgrade+0x6d0/0x6d0 [ 2545.415073] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2545.415710] ? wait_for_completion_io+0x270/0x270 [ 2545.416350] ? rcu_read_lock_any_held+0x75/0xa0 [ 2545.416962] ? vfs_write+0x354/0xb10 [ 2545.417459] ? fput_many+0x2f/0x1a0 [ 2545.417934] ? ksys_write+0x1a9/0x260 [ 2545.418438] ? __ia32_sys_read+0xb0/0xb0 [ 2545.418977] __x64_sys_sendmmsg+0x99/0x100 [ 2545.419537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2545.420233] do_syscall_64+0x33/0x40 [ 2545.420729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2545.421403] RIP: 0033:0x7fb085b27b19 [ 2545.421894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.424333] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2545.425338] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2545.426283] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2545.427229] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2545.428187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2545.429125] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2545.440765] loop0: detected capacity change from 0 to 16776704 [ 2545.448293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:53:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="244c00001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2545.459738] loop1: detected capacity change from 0 to 1536 [ 2545.464876] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2545.474868] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 2545.474868] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2545.474868] 00:53:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xffffff8c, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:53:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000002000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:02 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2545.589130] EXT4-fs (loop0): mounted filesystem without journal. Opts: noacl,,errors=continue [ 2545.649293] loop1: detected capacity change from 0 to 1536 [ 2545.674627] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:53:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="246800001200215f0000000070e600000a"], 0x24}}, 0x0) 00:53:17 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:53:17 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:53:17 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 46) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:53:17 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xfffffff6, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:53:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000003000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:17 executing program 0: timer_delete(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x19, 0xc21, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xc1, 0x4, 0x4, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x4000000000000004, 0xfffffffd, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r3, &(0x7f00000002c0)) timer_delete(r3) timer_gettime(r3, &(0x7f0000000400)) timer_gettime(r3, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x16, 0x0, @tid=r2}, &(0x7f00000000c0)) timer_gettime(r3, &(0x7f0000000040)) 00:53:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbd"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2560.535864] loop1: detected capacity change from 0 to 1536 [ 2560.549353] FAULT_INJECTION: forcing a failure. [ 2560.549353] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.551869] CPU: 0 PID: 14768 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2560.553370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2560.555156] Call Trace: [ 2560.555734] dump_stack+0x107/0x167 [ 2560.556532] should_fail.cold+0x5/0xa [ 2560.557354] ? ___slab_alloc+0x360/0x700 [ 2560.558227] ? create_object.isra.0+0x3a/0xa30 [ 2560.559212] should_failslab+0x5/0x20 [ 2560.560043] kmem_cache_alloc+0x5b/0x310 [ 2560.560924] create_object.isra.0+0x3a/0xa30 [ 2560.561870] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2560.562964] kmem_cache_alloc_node+0x169/0x330 [ 2560.563961] __alloc_skb+0x6d/0x5b0 [ 2560.564759] alloc_skb_with_frags+0x92/0x570 [ 2560.565709] ? mark_lock+0xf5/0x2df0 [ 2560.566509] ? mark_lock+0xf5/0x2df0 [ 2560.567331] sock_alloc_send_pskb+0x7af/0x930 [ 2560.568326] ? sk_alloc+0x350/0x350 [ 2560.569107] ? find_held_lock+0x2c/0x110 [ 2560.569986] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2560.571126] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2560.572218] ? rawv6_exit+0x20/0x20 [ 2560.573018] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2560.574057] ? ip6_mtu+0x1e9/0x3d0 [ 2560.574819] ? ip6_setup_cork+0xfb7/0x1740 [ 2560.575733] ip6_append_data+0x1e6/0x330 [ 2560.576611] ? rawv6_exit+0x20/0x20 [ 2560.577396] ? rawv6_exit+0x20/0x20 [ 2560.578183] icmp6_send+0x1250/0x1f30 [ 2560.579025] ? icmpv6_push_pending_frames+0x470/0x470 [ 2560.580136] ? find_held_lock+0x2c/0x110 [ 2560.581047] ? ip6_dst_hoplimit+0x440/0x440 [ 2560.581987] ip6_pkt_drop+0x3d2/0x7f0 [ 2560.582804] ? ip6_pkt_discard+0x20/0x20 [ 2560.583677] ip6_local_out+0x29f/0x4c0 [ 2560.584520] ip6_send_skb+0x117/0x460 [ 2560.584964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14782 comm=syz-executor.2 [ 2560.585339] udp_v6_send_skb+0x7b7/0x1620 [ 2560.587845] udpv6_sendmsg+0x216b/0x2b40 [ 2560.588721] ? ip_frag_init+0x350/0x350 [ 2560.589588] ? udp_v6_push_pending_frames+0x360/0x360 [ 2560.590696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2560.591836] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2560.593021] ? lock_acquire+0x197/0x470 [ 2560.593878] ? find_held_lock+0x2c/0x110 [ 2560.594766] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2560.595940] ? sock_has_perm+0x1ea/0x280 [ 2560.596842] ? __import_iovec+0x458/0x590 [ 2560.597741] ? udp_v6_push_pending_frames+0x360/0x360 [ 2560.598853] inet6_sendmsg+0x105/0x140 [ 2560.599691] ? inet6_compat_ioctl+0x320/0x320 [ 2560.600669] __sock_sendmsg+0xf2/0x190 [ 2560.601510] ____sys_sendmsg+0x334/0x870 [ 2560.602394] ? sock_write_iter+0x3d0/0x3d0 [ 2560.603301] ? do_recvmmsg+0x6d0/0x6d0 [ 2560.604155] ? __lock_acquire+0x1657/0x5b00 [ 2560.605094] ___sys_sendmsg+0xf3/0x170 [ 2560.605950] ? sendmsg_copy_msghdr+0x160/0x160 [ 2560.605971] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2560.605989] ? _raw_spin_unlock_irq+0x27/0x30 [ 2560.606017] ? lock_acquire+0x197/0x470 [ 2560.606034] ? find_held_lock+0x2c/0x110 [ 2560.606058] ? __might_fault+0xd3/0x180 [ 2560.606078] ? lock_downgrade+0x6d0/0x6d0 [ 2560.606115] __sys_sendmmsg+0x195/0x470 [ 2560.606138] ? __ia32_sys_sendmsg+0xb0/0xb0 00:53:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="246c00001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2560.606157] ? lock_downgrade+0x6d0/0x6d0 [ 2560.606193] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2560.606215] ? wait_for_completion_io+0x270/0x270 [ 2560.606238] ? rcu_read_lock_any_held+0x75/0xa0 [ 2560.606255] ? vfs_write+0x354/0xb10 [ 2560.606275] ? fput_many+0x2f/0x1a0 [ 2560.606291] ? ksys_write+0x1a9/0x260 [ 2560.606311] ? __ia32_sys_read+0xb0/0xb0 [ 2560.606336] __x64_sys_sendmmsg+0x99/0x100 [ 2560.606357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2560.606375] do_syscall_64+0x33/0x40 [ 2560.606395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2560.606408] RIP: 0033:0x7fb085b27b19 [ 2560.606427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2560.606437] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2560.624282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2560.625250] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2560.625262] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2560.625274] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2560.625285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2560.625298] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2560.636415] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:53:17 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xedc000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:53:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000004000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="247400001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2560.751234] loop1: detected capacity change from 0 to 1536 [ 2560.758641] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:53:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbd"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:53:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000003000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000005000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2560.894695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14815 comm=syz-executor.2 [ 2560.902295] loop0: detected capacity change from 0 to 1536 00:53:17 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x94}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2560.960463] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2561.008846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:53:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="247a00001200215f0000000070e600000a"], 0x24}}, 0x0) 00:53:36 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x9400}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:53:36 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 47) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:53:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000006000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:36 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:53:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffefffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed", 0x1, 0x2100}], 0x0, &(0x7f0000000100)) 00:53:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbd"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:53:36 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2579.291688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14837 comm=syz-executor.2 [ 2579.309897] loop0: detected capacity change from 0 to 33553920 00:53:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24f000001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2579.326354] loop1: detected capacity change from 0 to 1536 [ 2579.333499] FAULT_INJECTION: forcing a failure. [ 2579.333499] name failslab, interval 1, probability 0, space 0, times 0 [ 2579.336198] CPU: 1 PID: 14828 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2579.336426] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2579.337796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2579.337804] Call Trace: [ 2579.337832] dump_stack+0x107/0x167 [ 2579.337857] should_fail.cold+0x5/0xa [ 2579.343120] ? create_object.isra.0+0x3a/0xa30 [ 2579.344182] should_failslab+0x5/0x20 [ 2579.345061] kmem_cache_alloc+0x5b/0x310 [ 2579.346010] create_object.isra.0+0x3a/0xa30 [ 2579.347026] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2579.348215] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2579.349402] ? alloc_skb_with_frags+0x92/0x570 [ 2579.350453] ? fib6_table_lookup+0x636/0xaf0 [ 2579.351478] __alloc_skb+0xb1/0x5b0 [ 2579.352337] alloc_skb_with_frags+0x92/0x570 [ 2579.353357] ? mark_lock+0xf5/0x2df0 [ 2579.354227] ? mark_lock+0xf5/0x2df0 [ 2579.355091] sock_alloc_send_pskb+0x7af/0x930 [ 2579.356153] ? sk_alloc+0x350/0x350 [ 2579.356999] ? find_held_lock+0x2c/0x110 [ 2579.357941] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2579.359172] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2579.360352] ? rawv6_exit+0x20/0x20 [ 2579.361208] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2579.362319] ? ip6_mtu+0x1e9/0x3d0 [ 2579.363149] ? ip6_setup_cork+0xfb7/0x1740 [ 2579.364142] ip6_append_data+0x1e6/0x330 [ 2579.365082] ? rawv6_exit+0x20/0x20 [ 2579.365930] ? rawv6_exit+0x20/0x20 [ 2579.366776] icmp6_send+0x1250/0x1f30 [ 2579.367673] ? icmpv6_push_pending_frames+0x470/0x470 [ 2579.368869] ? find_held_lock+0x2c/0x110 [ 2579.369843] ? ip6_dst_hoplimit+0x440/0x440 [ 2579.370853] ip6_pkt_drop+0x3d2/0x7f0 [ 2579.371739] ? ip6_pkt_discard+0x20/0x20 [ 2579.372683] ip6_local_out+0x29f/0x4c0 [ 2579.373590] ip6_send_skb+0x117/0x460 [ 2579.374474] udp_v6_send_skb+0x7b7/0x1620 [ 2579.375445] udpv6_sendmsg+0x216b/0x2b40 [ 2579.376392] ? ip_frag_init+0x350/0x350 [ 2579.377322] ? udp_v6_push_pending_frames+0x360/0x360 [ 2579.378519] ? perf_event_task_disable+0x390/0x390 [ 2579.379655] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2579.380884] ? lock_acquire+0x197/0x470 [ 2579.381796] ? find_held_lock+0x2c/0x110 [ 2579.382750] ? sock_has_perm+0x1ea/0x280 [ 2579.383713] ? __import_iovec+0x458/0x590 [ 2579.384680] ? udp_v6_push_pending_frames+0x360/0x360 [ 2579.385877] inet6_sendmsg+0x105/0x140 [ 2579.386777] ? inet6_compat_ioctl+0x320/0x320 [ 2579.387814] __sock_sendmsg+0xf2/0x190 [ 2579.388726] ____sys_sendmsg+0x334/0x870 [ 2579.389672] ? sock_write_iter+0x3d0/0x3d0 [ 2579.390642] ? do_recvmmsg+0x6d0/0x6d0 [ 2579.391541] ? __lock_acquire+0x1657/0x5b00 [ 2579.392570] ___sys_sendmsg+0xf3/0x170 [ 2579.393468] ? sendmsg_copy_msghdr+0x160/0x160 [ 2579.394526] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2579.395551] ? _raw_spin_unlock_irq+0x27/0x30 [ 2579.396599] ? lock_acquire+0x197/0x470 [ 2579.397514] ? find_held_lock+0x2c/0x110 [ 2579.398458] ? __might_fault+0xd3/0x180 [ 2579.399379] ? lock_downgrade+0x6d0/0x6d0 [ 2579.400365] __sys_sendmmsg+0x195/0x470 [ 2579.401324] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2579.402324] ? lock_downgrade+0x6d0/0x6d0 [ 2579.403305] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2579.404668] ? wait_for_completion_io+0x270/0x270 [ 2579.405918] ? rcu_read_lock_any_held+0x75/0xa0 [ 2579.407105] ? vfs_write+0x354/0xb10 [ 2579.408080] ? fput_many+0x2f/0x1a0 [ 2579.408943] ? ksys_write+0x1a9/0x260 [ 2579.409759] ? __ia32_sys_read+0xb0/0xb0 [ 2579.410632] __x64_sys_sendmmsg+0x99/0x100 [ 2579.411531] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2579.412648] do_syscall_64+0x33/0x40 [ 2579.413456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2579.414583] RIP: 0033:0x7fb085b27b19 [ 2579.415397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2579.419366] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2579.421013] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2579.422549] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2579.424090] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2579.425630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2579.427157] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2579.432784] EXT4-fs error (device loop0): ext4_fill_super:4965: inode #2: comm syz-executor.0: iget: special inode unallocated [ 2579.443216] EXT4-fs (loop0): get root inode failed [ 2579.443884] EXT4-fs (loop0): mount failed [ 2579.462889] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:53:36 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:53:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240003001200215f0000000070e600000a"], 0x24}}, 0x0) 00:53:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000007000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:53:36 executing program 0: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x91) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x1d, 0xc21}, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r6, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) fallocate(0xffffffffffffffff, 0x13, 0x1, 0x2d) syz_io_uring_submit(r1, r2, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@isdn={0x22, 0xfc, 0x1, 0x0, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="853b69c889857aaa95cc3735c61e249ab4f94e484eac35b79a32e84440c97d959e75e4195dac2837d8980a7cf929d24a1cd09eb26d7d3ef296e5ae43f3e2e5bdb43e92b1e98370e35745b30a28d18ec1d9f01ef73920e9fcf66dc8715bf092749be77c4dedaf2ec22242ed3c3d32", 0x6e}, {&(0x7f00000001c0)="c3dfae3083267e1aa06a024c64e7c8ed8408ef3429fe5d88deb6fd7df96b61cf4eb372fd29262e98775650f5faeef976b3e616c4a4ee1a8b64c528d99385877fd05523d97095e4ade0ecd6026350bad7fdd289ba81e39b96b71253efd0ee43a6c1571c6dedc479242b700b34e59de30ec74adf60ad1ced50da06ed126dfa545533d9076a1f954d163c458c12e336a417917e8c90636e9aa3af6f65d693c8bd27b3", 0xa1}, {&(0x7f0000000280)="4d02c5f685039ec8fbc32f12409848dfa33accc7d528a106209598d6731a10a23f6dce6348ebc6e2b76f5d20864ba7d5198c11dd8f5853c325bc4cf5df8c9061aa2d55e8080a82e17f1b670a0202828502c8a29a4b694315a89e11b0b40bcdb4dfe0f2b925e41f6e1d996a16bef723710b9408b69778f7730e7628881be6d3f4ed813c014e9d86675c32ccbf", 0x8c}, {&(0x7f0000000480)="b3294c08bb82bde7dec370b522b98a287af13786bcfc1782fd3d877094fd6719b3bda4477251e33ad75754365d9fad6387d8e7cafa420dc09b56d9898252869ca98c1c81415c86e026f9987d2171f94d9c9976a50c1fcb4bbf487f8ec0bad75bc7fcba4af4b76c9681db938ac361c369c44bd3daa742469cd7589dbed219994a74ff9f2e4037d031033511cb9dfe25fc97da357b2f10ffc9e35f196447856a48e1beda7c10c09942b7be9fc89c25769a23e142fb12fd8421b6fc9341885fa81616dc55c3211f3ed0a00519d061594b512fbaba62d4828fa90c933d3c8695", 0xde}, {&(0x7f0000000340)="dc17b98bc3a2dd484068b53bb57065a1affd2bed64da6bda59cb2a661accd05765d0d981b559c558f51d0cbcddcffbff9c26427684f418d871370b9d9e0677d7a8b359c9aa3855b51ef4293473ab989dda3bbee7dc53309fbf1f41bb658fe28d86356fa9b03f8ab907b7a8d836c484c6d0bbb4f997ad7bdb15f3", 0x7a}, {&(0x7f0000000000)="87bef28ab40109d1", 0x8}], 0x6, &(0x7f0000000600)=[{0x40, 0x112, 0x400, "e08e6ff9d1966a8795eb7deaa8e66a91ba95356dc59c4480293506383979c359b0420516a1181f92e7de"}, {0x48, 0x109, 0x4, "ddb36f98208dd467760cf0b9554cab26ed63b75a1ab206fd917be5ab82625ab47eb9bbf425d0346318a24c4924be06cb63352b10f9a12a"}, {0x28, 0x109, 0xa8, "afa1a570a8e7aa7a0177898595b89e883b865c46"}, {0xa8, 0xff, 0x5, "a6c109f3ab2e7b85bab8e18b373a44735d280fbf6055fdc83fc08edfc809c07682e8c0a86cba57b89b6c7fadcaa7734f890ae72c971ca431e2f1565fd4c73f15e8a85da13884cf0fc237be4737a6e6ecd37780991578ae12d87636b67e8b3e4bcb16c8bb3001b0291170fd215446e266b564fbc62f916d6fa453b90d1a65c64e08f30a35f97255d273e1ac9e7b318c464f1f9707c6df"}, {0x80, 0x0, 0x3, "ffaf1e3a918c357a1f2059d4a52280bd5ab66b74296f7b55d121c100a825ecce87ba7726191e847751d16c2327f21f39b3523d8bd48e7045330246e2831a56c23bdd2fd32a36f639042ae5b69237c607f6e307739919e9872f8364bb3b9bb9414434813aaeb2217f27"}, {0x10, 0x118, 0x1}, {0xe8, 0x119, 0x6, "1f5bd7405e44be815a11900fb82a14431d88d49cfdb2097d8e11e7976f71262f228b12e7db04c4c0579238cca15dcf5630cbae210b3f4ec22a728fe9a0e844ec170d8f9c04f890544f941415d4554efb2bce56fc765768b4cf3308aa6383da1a36770a64d78fead8a65fcc6ba92e8b300d3eba25e58fc358991786f98b421c91ec29353844ee27555c8c8daf4e09b451cd5b6d7ff2bf4f42194b2705d32263a6eec75f022ab4ca8a081f47b2b28aebe13694e6a01d25ffbc049b6f1f383bfedebd288cff5097beb50a94a97fadc6a093c61f6d6354fdc2bb"}], 0x2d0}, 0x0, 0x821}, 0x7) clock_gettime(0x0, &(0x7f0000000100)) [ 2579.572036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14874 comm=syz-executor.2 00:53:36 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x100000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:53:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000008000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:52 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:53:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:53:52 executing program 0: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) dup3(r3, r4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7fffffff, 0x1f, 0x0, 0x5, 0xa6, 0x4}) 00:53:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000008008000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:52 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x94000000}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:53:52 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 48) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:53:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24ae03001200215f0000000070e600000a"], 0x24}}, 0x0) 00:53:52 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2595.673961] loop1: detected capacity change from 0 to 1536 00:53:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x250e, 0x3407, 0x2, &(0x7f0000000280)={[0x81]}, 0x8) r1 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2007, @fd_index=0x5, 0x9, &(0x7f0000000380)=[{&(0x7f0000000440)=""/159, 0xffffffffffffffa9}, {&(0x7f0000000240)}], 0x2, 0x16}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x3e, &(0x7f0000000040), &(0x7f0000000080)=0x10) dup2(r2, r4) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000001c0)=ANY=[]) r5 = inotify_init() r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, r1, 0x0) uselib(&(0x7f0000000180)='./file0/../file0\x00') r7 = epoll_create(0x81) syz_io_uring_submit(r6, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x7, 0x2, 0x1, {0x0, 0x0, r7}}, 0x52) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x5, 0x9a}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x80001, 0x98) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) [ 2595.713214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14905 comm=syz-executor.2 00:53:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240005001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2595.725482] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2595.733133] FAULT_INJECTION: forcing a failure. [ 2595.733133] name failslab, interval 1, probability 0, space 0, times 0 [ 2595.735635] CPU: 0 PID: 14901 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2595.737099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2595.738850] Call Trace: [ 2595.739419] dump_stack+0x107/0x167 [ 2595.740190] should_fail.cold+0x5/0xa [ 2595.741003] should_failslab+0x5/0x20 [ 2595.741808] __kmalloc_node_track_caller+0x74/0x3b0 [ 2595.742848] ? alloc_skb_with_frags+0x92/0x570 [ 2595.743812] ? fib6_table_lookup+0x636/0xaf0 [ 2595.744757] __alloc_skb+0xb1/0x5b0 [ 2595.745528] alloc_skb_with_frags+0x92/0x570 [ 2595.746460] ? mark_lock+0xf5/0x2df0 [ 2595.747250] ? mark_lock+0xf5/0x2df0 [ 2595.748031] sock_alloc_send_pskb+0x7af/0x930 [ 2595.749003] ? sk_alloc+0x350/0x350 [ 2595.749769] ? find_held_lock+0x2c/0x110 [ 2595.750625] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2595.751746] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2595.752825] ? rawv6_exit+0x20/0x20 [ 2595.753611] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2595.754634] ? ip6_mtu+0x1e9/0x3d0 [ 2595.755384] ? ip6_setup_cork+0xfb7/0x1740 [ 2595.756287] ip6_append_data+0x1e6/0x330 [ 2595.757146] ? rawv6_exit+0x20/0x20 [ 2595.757924] ? rawv6_exit+0x20/0x20 [ 2595.758690] icmp6_send+0x1250/0x1f30 [ 2595.759514] ? icmpv6_push_pending_frames+0x470/0x470 [ 2595.760610] ? find_held_lock+0x2c/0x110 [ 2595.761493] ? ip6_dst_hoplimit+0x440/0x440 [ 2595.762410] ip6_pkt_drop+0x3d2/0x7f0 [ 2595.763210] ? ip6_pkt_discard+0x20/0x20 [ 2595.764063] ip6_local_out+0x29f/0x4c0 [ 2595.764901] ip6_send_skb+0x117/0x460 [ 2595.765709] udp_v6_send_skb+0x7b7/0x1620 [ 2595.766593] udpv6_sendmsg+0x216b/0x2b40 [ 2595.767456] ? ip_frag_init+0x350/0x350 [ 2595.768312] ? udp_v6_push_pending_frames+0x360/0x360 [ 2595.769416] ? perf_event_task_disable+0x390/0x390 [ 2595.770441] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2595.771457] ? lock_acquire+0x197/0x470 [ 2595.772297] ? find_held_lock+0x2c/0x110 [ 2595.773174] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2595.774309] ? trace_hardirqs_on+0x5b/0x180 [ 2595.775235] ? sock_has_perm+0x1ea/0x280 [ 2595.776113] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2595.777255] ? trace_hardirqs_on+0x5b/0x180 [ 2595.778168] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2595.779332] ? udp_v6_push_pending_frames+0x360/0x360 [ 2595.780433] inet6_sendmsg+0x105/0x140 [ 2595.781259] ? inet6_compat_ioctl+0x320/0x320 [ 2595.782199] __sock_sendmsg+0xf2/0x190 [ 2595.783022] ____sys_sendmsg+0x334/0x870 [ 2595.783887] ? sock_write_iter+0x3d0/0x3d0 [ 2595.784790] ? do_recvmmsg+0x6d0/0x6d0 [ 2595.785627] ? find_held_lock+0x2c/0x110 [ 2595.786494] ___sys_sendmsg+0xf3/0x170 [ 2595.787315] ? sendmsg_copy_msghdr+0x160/0x160 [ 2595.788287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2595.789400] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2595.790342] ? trace_hardirqs_on+0x5b/0x180 [ 2595.791251] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2595.792194] ? finish_task_switch+0x126/0x5d0 [ 2595.793150] ? finish_task_switch+0xef/0x5d0 [ 2595.794078] ? __switch_to+0x572/0xf70 [ 2595.794893] ? __switch_to_asm+0x3a/0x60 [ 2595.795741] ? __switch_to_asm+0x34/0x60 [ 2595.796599] ? __schedule+0x82c/0x1ea0 [ 2595.797424] ? io_schedule_timeout+0x140/0x140 [ 2595.798407] __sys_sendmmsg+0x195/0x470 [ 2595.799250] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2595.800158] ? lock_downgrade+0x6d0/0x6d0 [ 2595.801060] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2595.802083] ? wait_for_completion_io+0x270/0x270 [ 2595.803095] ? rcu_read_lock_any_held+0x75/0xa0 [ 2595.804061] ? vfs_write+0x354/0xb10 [ 2595.804856] ? fput_many+0x2f/0x1a0 [ 2595.805616] ? ksys_write+0x1a9/0x260 [ 2595.806410] ? __ia32_sys_read+0xb0/0xb0 [ 2595.807269] __x64_sys_sendmmsg+0x99/0x100 [ 2595.808162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2595.809265] do_syscall_64+0x33/0x40 [ 2595.810220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2595.811333] RIP: 0033:0x7fb085b27b19 [ 2595.812173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2595.816131] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2595.817873] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2595.819538] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2595.821383] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2595.823009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2595.824549] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:53:52 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x300000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:53:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240006001200215f0000000070e600000a"], 0x24}}, 0x0) 00:53:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003000000000b000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:53:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:53:52 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0xffffff7f}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2596.046727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14931 comm=syz-executor.2 [ 2596.063086] loop1: detected capacity change from 0 to 1536 [ 2596.093534] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:53:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240007001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2596.239015] EXT4-fs (sda): re-mounted. Opts: (null) 00:54:07 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:54:07 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:54:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, 0x0, 0x4000890) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2611.094780] loop1: detected capacity change from 0 to 1536 [ 2611.112471] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:54:08 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x700000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:54:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x250e, 0x3407, 0x2, &(0x7f0000000280)={[0x81]}, 0x8) r1 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2007, @fd_index=0x5, 0x9, &(0x7f0000000380)=[{&(0x7f0000000440)=""/159, 0xffffffffffffffa9}, {&(0x7f0000000240)}], 0x2, 0x16}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x3e, &(0x7f0000000040), &(0x7f0000000080)=0x10) dup2(r2, r4) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000001c0)=ANY=[]) r5 = inotify_init() r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, r1, 0x0) uselib(&(0x7f0000000180)='./file0/../file0\x00') r7 = epoll_create(0x81) syz_io_uring_submit(r6, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x7, 0x2, 0x1, {0x0, 0x0, r7}}, 0x52) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x5, 0x9a}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x80001, 0x98) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) 00:54:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000018000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:54:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240009001200215f0000000070e600000a"], 0x24}}, 0x0) 00:54:08 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 49) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2611.127787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14963 comm=syz-executor.2 00:54:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003000000001c000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2611.151505] EXT4-fs (sda): re-mounted. Opts: (null) [ 2611.189177] FAULT_INJECTION: forcing a failure. [ 2611.189177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2611.192066] CPU: 0 PID: 14962 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2611.193723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2611.195712] Call Trace: [ 2611.196349] dump_stack+0x107/0x167 [ 2611.197218] should_fail.cold+0x5/0xa [ 2611.198135] _copy_from_user+0x2e/0x1b0 [ 2611.199095] __copy_msghdr_from_user+0x91/0x4b0 [ 2611.200213] ? __ia32_sys_shutdown+0x80/0x80 [ 2611.201296] ? udp_v6_push_pending_frames+0x360/0x360 [ 2611.202518] ? inet6_sendmsg+0xbd/0x140 [ 2611.203453] ? inet6_compat_ioctl+0x320/0x320 [ 2611.204538] ? __sock_sendmsg+0x55/0x190 [ 2611.205679] sendmsg_copy_msghdr+0xa1/0x160 [ 2611.206723] ? do_recvmmsg+0x6d0/0x6d0 [ 2611.206773] loop1: detected capacity change from 0 to 1536 [ 2611.207650] ? __lock_acquire+0x1657/0x5b00 [ 2611.207685] ___sys_sendmsg+0xc6/0x170 [ 2611.210906] ? sendmsg_copy_msghdr+0x160/0x160 [ 2611.212161] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2611.213472] ? _raw_spin_unlock_irq+0x27/0x30 [ 2611.214765] ? lock_acquire+0x197/0x470 [ 2611.215903] ? find_held_lock+0x2c/0x110 [ 2611.216906] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2611.218837] ? __might_fault+0xd3/0x180 [ 2611.219792] ? lock_downgrade+0x6d0/0x6d0 [ 2611.220804] __sys_sendmmsg+0x195/0x470 [ 2611.221753] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2611.222839] ? lock_downgrade+0x6d0/0x6d0 [ 2611.223901] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2611.225055] ? wait_for_completion_io+0x270/0x270 [ 2611.226179] ? rcu_read_lock_any_held+0x75/0xa0 [ 2611.227250] ? vfs_write+0x354/0xb10 [ 2611.228151] ? fput_many+0x2f/0x1a0 [ 2611.229190] ? ksys_write+0x1a9/0x260 [ 2611.230075] ? __ia32_sys_read+0xb0/0xb0 [ 2611.231206] __x64_sys_sendmmsg+0x99/0x100 [ 2611.232425] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2611.233700] do_syscall_64+0x33/0x40 [ 2611.234581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2611.235797] RIP: 0033:0x7fb085b27b19 [ 2611.236752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2611.241330] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2611.243101] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2611.244770] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2611.246435] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2611.248106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2611.249777] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:54:08 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:54:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003000000003f000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:54:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24c00e001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2611.342517] loop1: detected capacity change from 0 to 1536 [ 2611.363453] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:54:08 executing program 0: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0x0) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) faccessat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x101, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) dup3(0xffffffffffffffff, r2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6066e0, 0x0) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2004, @fd_index=0x1, 0x6, 0x0, 0x0, 0x14, 0x0, {0xffff, r6}}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="ab9f2e90c7577d7bc704fee5", @ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./f)le1\x00']) io_uring_enter(r7, 0x147f, 0x8f5a, 0x3, &(0x7f0000000040)={[0x8]}, 0x8) 00:54:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000063000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2611.446287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.447433] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 00:54:08 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 50) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:54:08 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0x94}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:54:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, 0x0, 0x4000890) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2611.475986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.477472] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2611.478697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14995 comm=syz-executor.2 [ 2611.486841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.488352] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 00:54:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000f001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2611.497800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.498870] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2611.501089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.502254] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2611.505030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.506069] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2611.508019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.509066] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2611.533265] FAULT_INJECTION: forcing a failure. [ 2611.533265] name failslab, interval 1, probability 0, space 0, times 0 [ 2611.535118] CPU: 1 PID: 14999 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2611.536192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2611.537496] Call Trace: [ 2611.537903] dump_stack+0x107/0x167 [ 2611.538481] should_fail.cold+0x5/0xa [ 2611.539088] ? create_object.isra.0+0x3a/0xa30 [ 2611.539767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.539802] should_failslab+0x5/0x20 [ 2611.541233] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 2611.541514] kmem_cache_alloc+0x5b/0x310 [ 2611.541540] ? __is_insn_slot_addr+0x14c/0x290 [ 2611.544957] create_object.isra.0+0x3a/0xa30 [ 2611.545618] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2611.546390] kmem_cache_alloc_node+0x169/0x330 [ 2611.547086] __alloc_skb+0x6d/0x5b0 [ 2611.547649] alloc_skb_with_frags+0x92/0x570 [ 2611.548325] sock_alloc_send_pskb+0x7af/0x930 [ 2611.549012] ? sk_alloc+0x350/0x350 [ 2611.549574] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2611.550379] ? lock_chain_count+0x20/0x20 [ 2611.551009] ? lock_chain_count+0x20/0x20 [ 2611.551653] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2611.552438] ? ip_frag_init+0x350/0x350 [ 2611.553054] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2611.553788] ? ip6_mtu+0x1e9/0x3d0 [ 2611.554311] ? ip6_setup_cork+0xfb7/0x1740 [ 2611.554952] ip6_make_skb+0x2df/0x4e0 [ 2611.555512] ? ip_frag_init+0x350/0x350 [ 2611.556110] ? ip_frag_init+0x350/0x350 [ 2611.556736] ? ip6_push_pending_frames+0xf0/0xf0 [ 2611.557459] ? ip6_dst_hoplimit+0x199/0x440 [ 2611.558115] ? lock_downgrade+0x6d0/0x6d0 [ 2611.558756] udpv6_sendmsg+0x2128/0x2b40 [ 2611.559365] ? ip_frag_init+0x350/0x350 [ 2611.559964] ? udp_v6_push_pending_frames+0x360/0x360 [ 2611.560765] ? perf_event_task_disable+0x390/0x390 [ 2611.561524] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2611.562334] ? lock_acquire+0x197/0x470 [ 2611.562928] ? find_held_lock+0x2c/0x110 [ 2611.563539] ? sock_has_perm+0x1ea/0x280 [ 2611.564185] ? __import_iovec+0x458/0x590 [ 2611.564808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.564888] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2611.565582] ? udp_v6_push_pending_frames+0x360/0x360 [ 2611.565597] inet6_sendmsg+0x105/0x140 [ 2611.565610] ? inet6_compat_ioctl+0x320/0x320 [ 2611.565623] __sock_sendmsg+0xf2/0x190 [ 2611.565637] ____sys_sendmsg+0x334/0x870 [ 2611.565653] ? sock_write_iter+0x3d0/0x3d0 [ 2611.565663] ? do_recvmmsg+0x6d0/0x6d0 [ 2611.565684] ? __lock_acquire+0x1657/0x5b00 [ 2611.572715] ___sys_sendmsg+0xf3/0x170 [ 2611.573307] ? sendmsg_copy_msghdr+0x160/0x160 [ 2611.574001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2611.574802] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2611.575475] ? trace_hardirqs_on+0x5b/0x180 [ 2611.576120] ? lock_acquire+0x197/0x470 [ 2611.576743] ? find_held_lock+0x2c/0x110 [ 2611.577380] ? __might_fault+0xd3/0x180 [ 2611.578000] ? lock_downgrade+0x6d0/0x6d0 [ 2611.578635] __sys_sendmmsg+0x195/0x470 [ 2611.579242] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2611.579884] ? lock_downgrade+0x6d0/0x6d0 [ 2611.580523] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2611.581253] ? wait_for_completion_io+0x270/0x270 [ 2611.581984] ? rcu_read_lock_any_held+0x75/0xa0 [ 2611.582674] ? vfs_write+0x354/0xb10 [ 2611.583231] ? fput_many+0x2f/0x1a0 [ 2611.583776] ? ksys_write+0x1a9/0x260 [ 2611.584345] ? __ia32_sys_read+0xb0/0xb0 [ 2611.584963] __x64_sys_sendmmsg+0x99/0x100 [ 2611.585591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2611.586358] do_syscall_64+0x33/0x40 [ 2611.586918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2611.587214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.587697] RIP: 0033:0x7fb085b27b19 [ 2611.587713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2611.587721] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2611.587735] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2611.587743] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2611.587751] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2611.587758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2611.587766] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2611.605010] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2611.623247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.624396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.625736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.626988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.628028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.645157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.646259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.647919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.649282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.650944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.669376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.670533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.671994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.673289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.674514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.675731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.678141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.705889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.707447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.709850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.711327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.712655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.713919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.715165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.716694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.718097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.719277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.737407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.738892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.740166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.741459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.742743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.743992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.745273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.746491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.747765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.764838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.766166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.767748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.769335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.771660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.789385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.790730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.792366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.793675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.794942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.796212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.797496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.798764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.800022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.813663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.815029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.816296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.817571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.818831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.820083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.821334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.822631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.823838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.825129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.826343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.827635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.829104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.847363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.848706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.850255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.851467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.852716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.853984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.855225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.856494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.857728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.858931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.860139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.862491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.864003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.865286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.866594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.867848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.869115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.870383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.871685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.874014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.875199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.876188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.878707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.882153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.883893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.890254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.892815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.893760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.895255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.896347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.907823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.908790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.910145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.911509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.915784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.916512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.920807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.921509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.923201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.925800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.927066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.929784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.930905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:54:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240040001200215f0000000070e600000a"], 0x24}}, 0x0) 00:54:08 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x900000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2611.948104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.949232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2611.950106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:54:08 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0x9400}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:54:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000480000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:54:08 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:54:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, 0x0, 0x4000890) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:54:08 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 51) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2611.969831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15023 comm=syz-executor.2 [ 2611.976359] FAULT_INJECTION: forcing a failure. [ 2611.976359] name failslab, interval 1, probability 0, space 0, times 0 [ 2611.977979] CPU: 1 PID: 15018 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2611.978844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2611.979997] Call Trace: [ 2611.980374] dump_stack+0x107/0x167 [ 2611.980904] should_fail.cold+0x5/0xa [ 2611.981445] should_failslab+0x5/0x20 [ 2611.981992] __kmalloc_node_track_caller+0x74/0x3b0 [ 2611.982579] ? alloc_skb_with_frags+0x92/0x570 [ 2611.983110] __alloc_skb+0xb1/0x5b0 [ 2611.983539] alloc_skb_with_frags+0x92/0x570 [ 2611.984060] sock_alloc_send_pskb+0x7af/0x930 [ 2611.984624] ? sk_alloc+0x350/0x350 [ 2611.985059] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2611.985799] ? lock_chain_count+0x20/0x20 [ 2611.986315] ? lock_chain_count+0x20/0x20 [ 2611.986825] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2611.987547] ? ip_frag_init+0x350/0x350 [ 2611.988065] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2611.988639] ? ip6_mtu+0x1e9/0x3d0 [ 2611.989137] ? ip6_setup_cork+0xfb7/0x1740 [ 2611.989737] ip6_make_skb+0x2df/0x4e0 [ 2611.990279] ? ip_frag_init+0x350/0x350 [ 2611.990767] ? ip_frag_init+0x350/0x350 [ 2611.991335] ? ip6_push_pending_frames+0xf0/0xf0 [ 2611.992007] ? ip6_dst_hoplimit+0x199/0x440 [ 2611.992620] ? lock_downgrade+0x6d0/0x6d0 [ 2611.993162] udpv6_sendmsg+0x2128/0x2b40 [ 2611.993644] ? ip_frag_init+0x350/0x350 [ 2611.994123] ? udp_v6_push_pending_frames+0x360/0x360 [ 2611.994862] ? perf_event_task_disable+0x390/0x390 [ 2611.995553] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2611.996225] ? lock_acquire+0x197/0x470 [ 2611.996762] ? find_held_lock+0x2c/0x110 [ 2611.997241] ? sock_has_perm+0x1ea/0x280 [ 2611.997726] ? __import_iovec+0x458/0x590 [ 2611.998215] ? udp_v6_push_pending_frames+0x360/0x360 [ 2611.998954] inet6_sendmsg+0x105/0x140 [ 2611.999519] ? inet6_compat_ioctl+0x320/0x320 [ 2612.000051] __sock_sendmsg+0xf2/0x190 [ 2612.000540] ____sys_sendmsg+0x334/0x870 [ 2612.001000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.001029] ? sock_write_iter+0x3d0/0x3d0 [ 2612.002769] ? do_recvmmsg+0x6d0/0x6d0 [ 2612.002927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.003331] ? __lock_acquire+0x1657/0x5b00 [ 2612.005083] ___sys_sendmsg+0xf3/0x170 [ 2612.005132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.005555] ? sendmsg_copy_msghdr+0x160/0x160 [ 2612.005568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2612.005579] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2612.005588] ? trace_hardirqs_on+0x5b/0x180 [ 2612.005602] ? lock_acquire+0x197/0x470 [ 2612.005611] ? find_held_lock+0x2c/0x110 [ 2612.005624] ? __might_fault+0xd3/0x180 [ 2612.005635] ? lock_downgrade+0x6d0/0x6d0 [ 2612.005653] __sys_sendmmsg+0x195/0x470 [ 2612.005664] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2612.005674] ? lock_downgrade+0x6d0/0x6d0 [ 2612.005692] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2612.005709] ? wait_for_completion_io+0x270/0x270 [ 2612.007480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.008116] ? rcu_read_lock_any_held+0x75/0xa0 [ 2612.008130] ? vfs_write+0x354/0xb10 [ 2612.008140] ? fput_many+0x2f/0x1a0 [ 2612.008149] ? ksys_write+0x1a9/0x260 [ 2612.008169] ? __ia32_sys_read+0xb0/0xb0 [ 2612.017472] __x64_sys_sendmmsg+0x99/0x100 [ 2612.017965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2612.018556] do_syscall_64+0x33/0x40 [ 2612.018984] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2612.019586] RIP: 0033:0x7fb085b27b19 [ 2612.020026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2612.021801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.022181] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2612.024197] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2612.025136] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2612.026153] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2612.027040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2612.027860] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2612.034184] loop1: detected capacity change from 0 to 1536 [ 2612.037945] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:54:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240048001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2612.051341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:54:08 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa00000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2612.067337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:54:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000890) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2612.097031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.099159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.101097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.103392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.133365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.150291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.151204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.152015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.152861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.153672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.154428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.155281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.156099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.156831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.178289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.179894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.181354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.184917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.186826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.191175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15043 comm=syz-executor.2 [ 2612.211870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.214076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.216331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.234893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.252374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.253878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.256956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.274046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.274915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.275627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.276311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.277016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.277712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.278384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.279077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.279791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.280475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.281182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.285137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.292757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.294476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.295782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.309419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.310960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.312462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.319628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.325453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.327820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.329621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.330911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.335755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.336824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.337571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.338958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.339716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.340701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.341577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.342382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.345734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.346786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.347678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.348758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.352649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.353503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.354435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.355585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.360667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.361537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.362426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.363671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.364701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.371651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.372517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.373329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.374725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.375452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.376220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.377000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.377765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.378467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.379251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.380034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.381282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.382050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.382964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.383801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.384586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.385297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.386099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.386854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.388275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.389077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.389865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.390597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.391343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.392170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.392950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.393677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.394750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.395470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.396433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.397216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.397984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.398721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.399438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.400223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.401344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.402169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.402931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.403674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.404439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.405479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.406271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.406974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.407863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.408642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.409380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.410528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.411307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.412059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.412986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.413760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.414583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.415628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.416388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.417715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.418426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.419254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.420062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.420796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.421849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.422619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.423335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.424055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.425247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.426649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.427359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.428142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.428988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.429842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.430920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.431767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.432489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.435290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.436038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.436835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.437672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.438389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.439353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.440127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.441147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.441894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.442721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.443424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.444453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.445275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.446032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.446757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.447473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.448508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.449315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.450053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.451271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.452056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.452824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.453505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.454239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.455290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.456085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.456823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.457686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.458383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.459111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.460073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.460869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.461641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.462697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.463388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.464278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.465102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.465870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.466599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.467318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.468282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.469063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.469821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.470618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.471328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.472159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.472971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.473723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.474398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.475331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.476095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.477439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.478230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.479016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.479765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.480482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.481252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.482127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.482842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.485685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.486371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.487140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.488099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.488880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.489617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.490368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.491326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.492439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.493215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.494065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.494936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.495694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.496410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.497373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.498148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.498962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.499683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.500426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.501207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.501937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.502669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.503419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.504197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.505320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.506153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.506916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.507676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.508453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.509517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.510290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.511018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.512037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.512824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.513642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.514605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.515337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.516135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.516894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.517620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.518429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.519653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.520360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.521139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.521883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.522718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.523403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.524148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.525199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.525989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.526780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.528267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.529012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.529864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.530712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.531427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2612.532802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:54:25 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:54:25 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0x9400}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:54:25 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xb00000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:54:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300ffffff8c000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:54:25 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24004c001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2628.145046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15067 comm=syz-executor.2 00:54:25 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0x94000000}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:54:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000890) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:54:25 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 52) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2628.151258] loop1: detected capacity change from 0 to 1536 [ 2628.163479] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2628.172376] FAULT_INJECTION: forcing a failure. [ 2628.172376] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.173970] CPU: 0 PID: 15071 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2628.173978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2628.173983] Call Trace: [ 2628.174002] dump_stack+0x107/0x167 [ 2628.174017] should_fail.cold+0x5/0xa [ 2628.174032] should_failslab+0x5/0x20 [ 2628.174046] __kmalloc_node_track_caller+0x74/0x3b0 [ 2628.174059] ? alloc_skb_with_frags+0x92/0x570 [ 2628.174075] __alloc_skb+0xb1/0x5b0 [ 2628.174091] alloc_skb_with_frags+0x92/0x570 [ 2628.174109] sock_alloc_send_pskb+0x7af/0x930 [ 2628.174127] ? sk_alloc+0x350/0x350 [ 2628.174145] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2628.174157] ? lock_chain_count+0x20/0x20 [ 2628.174170] ? lock_chain_count+0x20/0x20 [ 2628.174186] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2628.174207] ? ip_frag_init+0x350/0x350 [ 2628.174225] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2628.174237] ? ip6_mtu+0x1e9/0x3d0 [ 2628.174248] ? ip6_setup_cork+0xfb7/0x1740 [ 2628.174262] ip6_make_skb+0x2df/0x4e0 00:54:25 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:54:25 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240068001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2628.174273] ? ip_frag_init+0x350/0x350 [ 2628.174287] ? ip_frag_init+0x350/0x350 [ 2628.174301] ? ip6_push_pending_frames+0xf0/0xf0 [ 2628.174315] ? ip6_dst_hoplimit+0x199/0x440 [ 2628.174326] ? lock_downgrade+0x6d0/0x6d0 [ 2628.174348] udpv6_sendmsg+0x2128/0x2b40 [ 2628.174363] ? ip_frag_init+0x350/0x350 [ 2628.174381] ? udp_v6_push_pending_frames+0x360/0x360 [ 2628.174405] ? lock_acquire+0x197/0x470 [ 2628.174416] ? find_held_lock+0x2c/0x110 [ 2628.174436] ? sock_has_perm+0x1ea/0x280 [ 2628.174462] ? __import_iovec+0x458/0x590 [ 2628.174475] ? udp_v6_push_pending_frames+0x360/0x360 [ 2628.174488] inet6_sendmsg+0x105/0x140 [ 2628.174498] ? inet6_compat_ioctl+0x320/0x320 [ 2628.174510] __sock_sendmsg+0xf2/0x190 [ 2628.174523] ____sys_sendmsg+0x334/0x870 [ 2628.174537] ? sock_write_iter+0x3d0/0x3d0 [ 2628.174545] ? do_recvmmsg+0x6d0/0x6d0 [ 2628.174559] ? __lock_acquire+0x1657/0x5b00 [ 2628.174576] ___sys_sendmsg+0xf3/0x170 [ 2628.174587] ? sendmsg_copy_msghdr+0x160/0x160 [ 2628.174602] ? __fget_files+0x2cf/0x520 [ 2628.174618] ? lock_acquire+0x197/0x470 [ 2628.174628] ? find_held_lock+0x2c/0x110 [ 2628.174643] ? __might_fault+0xd3/0x180 [ 2628.174655] ? lock_downgrade+0x6d0/0x6d0 [ 2628.174676] __sys_sendmmsg+0x195/0x470 [ 2628.174689] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2628.174701] ? lock_downgrade+0x6d0/0x6d0 [ 2628.174722] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2628.174735] ? wait_for_completion_io+0x270/0x270 [ 2628.174749] ? rcu_read_lock_any_held+0x75/0xa0 [ 2628.174761] ? vfs_write+0x354/0xb10 [ 2628.174773] ? fput_many+0x2f/0x1a0 [ 2628.174782] ? ksys_write+0x1a9/0x260 [ 2628.174794] ? __ia32_sys_read+0xb0/0xb0 [ 2628.174809] __x64_sys_sendmmsg+0x99/0x100 [ 2628.174823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.174833] do_syscall_64+0x33/0x40 [ 2628.174846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2628.174853] RIP: 0033:0x7fb085b27b19 [ 2628.174865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.174871] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2628.174884] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2628.174891] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2628.174898] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2628.174905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.174912] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:54:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300000007c0000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:54:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000890) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:54:25 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 53) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:54:25 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24006c001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2628.378123] loop1: detected capacity change from 0 to 1536 00:54:25 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2628.408922] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2628.415860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15099 comm=syz-executor.2 00:54:25 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0xffffff7f}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2628.463464] FAULT_INJECTION: forcing a failure. [ 2628.463464] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.464843] CPU: 0 PID: 15103 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2628.465640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2628.466605] Call Trace: [ 2628.466923] dump_stack+0x107/0x167 [ 2628.467348] should_fail.cold+0x5/0xa [ 2628.467791] should_failslab+0x5/0x20 [ 2628.468231] __kmalloc_node_track_caller+0x74/0x3b0 [ 2628.468821] ? alloc_skb_with_frags+0x92/0x570 [ 2628.469360] __alloc_skb+0xb1/0x5b0 [ 2628.469789] alloc_skb_with_frags+0x92/0x570 [ 2628.470303] sock_alloc_send_pskb+0x7af/0x930 [ 2628.470832] ? sk_alloc+0x350/0x350 [ 2628.471262] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2628.471873] ? lock_chain_count+0x20/0x20 [ 2628.472355] ? lock_chain_count+0x20/0x20 [ 2628.472849] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2628.473438] ? ip_frag_init+0x350/0x350 [ 2628.473904] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2628.474462] ? ip6_mtu+0x1e9/0x3d0 [ 2628.474879] ? ip6_setup_cork+0xfb7/0x1740 [ 2628.475370] ip6_make_skb+0x2df/0x4e0 [ 2628.475813] ? ip_frag_init+0x350/0x350 [ 2628.476278] ? ip_frag_init+0x350/0x350 [ 2628.476752] ? ip6_push_pending_frames+0xf0/0xf0 [ 2628.477306] ? ip6_dst_hoplimit+0x199/0x440 [ 2628.477808] ? lock_downgrade+0x6d0/0x6d0 [ 2628.478300] udpv6_sendmsg+0x2128/0x2b40 [ 2628.478771] ? ip_frag_init+0x350/0x350 [ 2628.479235] ? udp_v6_push_pending_frames+0x360/0x360 [ 2628.479836] ? find_held_lock+0x2c/0x110 [ 2628.480308] ? lock_acquire+0x197/0x470 [ 2628.480775] ? find_held_lock+0x2c/0x110 [ 2628.481249] ? sock_has_perm+0x1ea/0x280 [ 2628.481726] ? __import_iovec+0x458/0x590 [ 2628.482204] ? udp_v6_push_pending_frames+0x360/0x360 [ 2628.482798] inet6_sendmsg+0x105/0x140 [ 2628.483247] ? inet6_compat_ioctl+0x320/0x320 [ 2628.483766] __sock_sendmsg+0xf2/0x190 [ 2628.484216] ____sys_sendmsg+0x334/0x870 [ 2628.484692] ? sock_write_iter+0x3d0/0x3d0 [ 2628.485184] ? do_recvmmsg+0x6d0/0x6d0 [ 2628.485634] ? __lock_acquire+0x1657/0x5b00 [ 2628.486135] ___sys_sendmsg+0xf3/0x170 [ 2628.486586] ? sendmsg_copy_msghdr+0x160/0x160 [ 2628.487116] ? __fget_files+0x2cf/0x520 [ 2628.487576] ? lock_acquire+0x197/0x470 [ 2628.488036] ? find_held_lock+0x2c/0x110 [ 2628.488510] ? __might_fault+0xd3/0x180 [ 2628.488978] ? lock_downgrade+0x6d0/0x6d0 [ 2628.489462] __sys_sendmmsg+0x195/0x470 [ 2628.489919] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2628.490416] ? lock_downgrade+0x6d0/0x6d0 [ 2628.490902] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2628.491456] ? wait_for_completion_io+0x270/0x270 [ 2628.492014] ? rcu_read_lock_any_held+0x75/0xa0 [ 2628.492549] ? vfs_write+0x354/0xb10 [ 2628.492985] ? fput_many+0x2f/0x1a0 [ 2628.493399] ? ksys_write+0x1a9/0x260 [ 2628.493832] ? __ia32_sys_read+0xb0/0xb0 [ 2628.494300] __x64_sys_sendmmsg+0x99/0x100 [ 2628.494791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2628.495381] do_syscall_64+0x33/0x40 [ 2628.495805] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2628.496388] RIP: 0033:0x7fb085b27b19 [ 2628.496827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.498929] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2628.499803] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2628.500629] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2628.501442] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2628.502260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.503071] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:54:40 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2010000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:54:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300fffffdef000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:54:40 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240074001200215f0000000070e600000a"], 0x24}}, 0x0) 00:54:40 executing program 0: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0x94000000}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:54:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2c}}, 0x4000890) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:54:40 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 54) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:54:40 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x94) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:54:40 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2643.808061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15135 comm=syz-executor.2 [ 2643.821033] loop1: detected capacity change from 0 to 1536 [ 2643.832720] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2643.836242] FAULT_INJECTION: forcing a failure. [ 2643.836242] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.838883] CPU: 0 PID: 15125 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2643.840435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2643.842305] Call Trace: [ 2643.842908] dump_stack+0x107/0x167 [ 2643.843734] should_fail.cold+0x5/0xa [ 2643.844593] should_failslab+0x5/0x20 [ 2643.845458] __kmalloc_node_track_caller+0x74/0x3b0 [ 2643.846583] ? alloc_skb_with_frags+0x92/0x570 [ 2643.847618] __alloc_skb+0xb1/0x5b0 [ 2643.848442] alloc_skb_with_frags+0x92/0x570 [ 2643.849449] sock_alloc_send_pskb+0x7af/0x930 [ 2643.850471] ? sk_alloc+0x350/0x350 [ 2643.851300] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2643.852475] ? lock_chain_count+0x20/0x20 [ 2643.853414] ? lock_chain_count+0x20/0x20 [ 2643.854351] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2643.855487] ? ip_frag_init+0x350/0x350 [ 2643.856393] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2643.857480] ? ip6_mtu+0x1e9/0x3d0 [ 2643.858277] ? ip6_setup_cork+0xfb7/0x1740 [ 2643.859231] ip6_make_skb+0x2df/0x4e0 [ 2643.860085] ? ip_frag_init+0x350/0x350 [ 2643.860991] ? ip_frag_init+0x350/0x350 [ 2643.861900] ? ip6_push_pending_frames+0xf0/0xf0 [ 2643.862979] ? ip6_dst_hoplimit+0x199/0x440 [ 2643.863955] ? lock_downgrade+0x6d0/0x6d0 [ 2643.864919] udpv6_sendmsg+0x2128/0x2b40 [ 2643.865849] ? ip_frag_init+0x350/0x350 [ 2643.866758] ? udp_v6_push_pending_frames+0x360/0x360 [ 2643.867929] ? perf_event_task_disable+0x390/0x390 [ 2643.869056] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2643.870152] ? lock_acquire+0x197/0x470 [ 2643.871053] ? find_held_lock+0x2c/0x110 [ 2643.871990] ? sock_has_perm+0x1ea/0x280 [ 2643.872936] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2643.874157] ? inet6_compat_ioctl+0x320/0x320 [ 2643.875177] ? udp_v6_push_pending_frames+0x360/0x360 [ 2643.876345] inet6_sendmsg+0x105/0x140 [ 2643.877232] ? inet6_compat_ioctl+0x320/0x320 [ 2643.878246] __sock_sendmsg+0xf2/0x190 [ 2643.879130] ____sys_sendmsg+0x334/0x870 [ 2643.880051] ? trace_hardirqs_on+0x5b/0x180 [ 2643.881038] ? sock_write_iter+0x3d0/0x3d0 [ 2643.881996] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2643.883226] ? ___sys_sendmsg+0xd2/0x170 [ 2643.884148] ___sys_sendmsg+0xf3/0x170 [ 2643.885071] ? sendmsg_copy_msghdr+0x160/0x160 [ 2643.886223] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2643.887257] ? _raw_spin_unlock_irq+0x27/0x30 [ 2643.888187] ? finish_task_switch+0x126/0x5d0 [ 2643.889133] ? finish_task_switch+0xef/0x5d0 [ 2643.890041] ? __switch_to+0x572/0xf70 [ 2643.890842] ? __switch_to_asm+0x3a/0x60 [ 2643.891672] ? __switch_to_asm+0x34/0x60 [ 2643.892501] ? __schedule+0x82c/0x1ea0 [ 2643.893324] ? io_schedule_timeout+0x140/0x140 [ 2643.894275] __sys_sendmmsg+0x195/0x470 [ 2643.895132] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2643.896014] ? lock_downgrade+0x6d0/0x6d0 [ 2643.896886] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2643.897879] ? wait_for_completion_io+0x270/0x270 [ 2643.898876] ? rcu_read_lock_any_held+0x75/0xa0 [ 2643.899835] ? vfs_write+0x354/0xb10 [ 2643.900624] ? fput_many+0x2f/0x1a0 [ 2643.901393] ? ksys_write+0x1a9/0x260 [ 2643.902178] ? __ia32_sys_read+0xb0/0xb0 [ 2643.903014] __x64_sys_sendmmsg+0x99/0x100 [ 2643.903919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2643.904991] do_syscall_64+0x33/0x40 [ 2643.905754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2643.906799] RIP: 0033:0x7fb085b27b19 [ 2643.907568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.911404] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2643.913021] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2643.914511] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2643.915992] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2643.917487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.918952] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:54:40 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24007a001200215f0000000070e600000a"], 0x24}}, 0x0) 00:54:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300fffffff6000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2644.155224] loop1: detected capacity change from 0 to 1536 [ 2644.178494] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:54:55 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:54:55 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4000000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2658.619849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15165 comm=syz-executor.2 [ 2658.620248] loop1: detected capacity change from 0 to 1536 [ 2658.646029] FAULT_INJECTION: forcing a failure. [ 2658.646029] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.648519] CPU: 0 PID: 15173 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2658.649999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.651759] Call Trace: [ 2658.652332] dump_stack+0x107/0x167 [ 2658.653121] should_fail.cold+0x5/0xa [ 2658.653932] ? create_object.isra.0+0x3a/0xa30 [ 2658.654892] should_failslab+0x5/0x20 [ 2658.655698] kmem_cache_alloc+0x5b/0x310 [ 2658.656557] ? mark_lock+0xf5/0x2df0 [ 2658.657362] create_object.isra.0+0x3a/0xa30 [ 2658.658292] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.659368] kmem_cache_alloc_node+0x169/0x330 [ 2658.660338] ? fib6_table_lookup+0x636/0xaf0 [ 2658.661287] __alloc_skb+0x6d/0x5b0 [ 2658.662064] alloc_skb_with_frags+0x92/0x570 [ 2658.662995] ? mark_lock+0xf5/0x2df0 [ 2658.663784] ? mark_lock+0xf5/0x2df0 [ 2658.664573] sock_alloc_send_pskb+0x7af/0x930 [ 2658.665542] ? sk_alloc+0x350/0x350 [ 2658.666312] ? find_held_lock+0x2c/0x110 [ 2658.667184] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2658.668309] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2658.669385] ? rawv6_exit+0x20/0x20 [ 2658.670168] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2658.671187] ? ip6_mtu+0x1e9/0x3d0 [ 2658.671935] ? ip6_setup_cork+0xfb7/0x1740 [ 2658.672834] ip6_append_data+0x1e6/0x330 [ 2658.673725] ? rawv6_exit+0x20/0x20 [ 2658.674497] ? rawv6_exit+0x20/0x20 [ 2658.675272] icmp6_send+0x1250/0x1f30 [ 2658.676095] ? icmpv6_push_pending_frames+0x470/0x470 [ 2658.677197] ? find_held_lock+0x2c/0x110 [ 2658.678089] ? ip6_dst_hoplimit+0x440/0x440 [ 2658.679008] ip6_pkt_drop+0x3d2/0x7f0 [ 2658.679814] ? ip6_pkt_discard+0x20/0x20 [ 2658.680674] ip6_local_out+0x29f/0x4c0 [ 2658.681515] ip6_send_skb+0x117/0x460 [ 2658.682323] udp_v6_send_skb+0x7b7/0x1620 [ 2658.683213] udpv6_sendmsg+0x216b/0x2b40 [ 2658.684084] ? ip_frag_init+0x350/0x350 [ 2658.684946] ? udp_v6_push_pending_frames+0x360/0x360 [ 2658.686058] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2658.687220] ? lock_acquire+0x197/0x470 [ 2658.688064] ? find_held_lock+0x2c/0x110 [ 2658.688956] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2658.690108] ? sock_has_perm+0x1ea/0x280 [ 2658.690995] ? __import_iovec+0x458/0x590 [ 2658.691875] ? udp_v6_push_pending_frames+0x360/0x360 [ 2658.692984] inet6_sendmsg+0x105/0x140 [ 2658.693811] ? inet6_compat_ioctl+0x320/0x320 [ 2658.694761] __sock_sendmsg+0xf2/0x190 [ 2658.695584] ____sys_sendmsg+0x334/0x870 [ 2658.696451] ? sock_write_iter+0x3d0/0x3d0 [ 2658.697352] ? do_recvmmsg+0x6d0/0x6d0 [ 2658.698183] ? __lock_acquire+0x1657/0x5b00 [ 2658.699116] ___sys_sendmsg+0xf3/0x170 [ 2658.699941] ? sendmsg_copy_msghdr+0x160/0x160 [ 2658.700921] ? finish_task_switch+0xef/0x5d0 [ 2658.701868] ? lock_acquire+0x197/0x470 [ 2658.702710] ? find_held_lock+0x2c/0x110 [ 2658.703581] ? __might_fault+0xd3/0x180 [ 2658.704422] ? lock_downgrade+0x6d0/0x6d0 [ 2658.705327] __sys_sendmmsg+0x195/0x470 [ 2658.706174] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2658.707094] ? lock_downgrade+0x6d0/0x6d0 [ 2658.707990] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2658.709025] ? wait_for_completion_io+0x270/0x270 [ 2658.710047] ? rcu_read_lock_any_held+0x75/0xa0 [ 2658.711029] ? vfs_write+0x354/0xb10 [ 2658.711827] ? fput_many+0x2f/0x1a0 [ 2658.712605] ? ksys_write+0x1a9/0x260 [ 2658.713429] ? __ia32_sys_read+0xb0/0xb0 [ 2658.714291] __x64_sys_sendmmsg+0x99/0x100 [ 2658.715191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2658.716285] do_syscall_64+0x33/0x40 [ 2658.717082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2658.718176] RIP: 0033:0x7fb085b27b19 [ 2658.718964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.722878] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2658.724490] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2658.726004] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2658.727506] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2658.729022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2658.730533] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2658.745778] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:54:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300fffffdfc000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:54:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2403ae001200215f0000000070e600000a"], 0x24}}, 0x0) 00:54:55 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 55) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:54:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2c}}, 0x4000890) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:54:55 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x9400) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:54:55 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000200008000f800", 0x17}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)) r0 = getuid() mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1304084, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x8000}}, {@common=@version_9p2000}, {@common=@fscache}, {@rq={'rq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x8000}}, {@rq={'rq', 0x3d, 0x1}}, {@common=@access_uid={'access', 0x3d, 0xee01}}, {@common=@cache_none}], [{@permit_directio}, {@uid_gt={'uid>', r0}}, {@dont_measure}]}}) 00:54:55 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8cffffff00000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2658.819500] loop0: detected capacity change from 0 to 32768 [ 2658.853288] FAT-fs (loop0): bogus number of FAT sectors 00:54:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300fffffdfd000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:54:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240ec0001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2658.854631] FAT-fs (loop0): Can't find a valid FAT filesystem 00:54:55 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:54:55 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 56) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2658.957215] loop1: detected capacity change from 0 to 1536 [ 2658.976869] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:54:55 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xf6ffffff00000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2659.072533] FAULT_INJECTION: forcing a failure. [ 2659.072533] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.075202] CPU: 0 PID: 15208 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2659.076625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2659.078356] Call Trace: [ 2659.078908] dump_stack+0x107/0x167 [ 2659.079665] should_fail.cold+0x5/0xa [ 2659.080454] ? create_object.isra.0+0x3a/0xa30 [ 2659.081404] should_failslab+0x5/0x20 [ 2659.082190] kmem_cache_alloc+0x5b/0x310 [ 2659.083029] ? mark_lock+0xf5/0x2df0 [ 2659.083810] create_object.isra.0+0x3a/0xa30 [ 2659.084726] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2659.085798] kmem_cache_alloc_node+0x169/0x330 [ 2659.086746] ? fib6_table_lookup+0x636/0xaf0 [ 2659.087671] __alloc_skb+0x6d/0x5b0 [ 2659.088432] alloc_skb_with_frags+0x92/0x570 [ 2659.089366] ? mark_lock+0xf5/0x2df0 [ 2659.090136] ? mark_lock+0xf5/0x2df0 [ 2659.090913] sock_alloc_send_pskb+0x7af/0x930 [ 2659.091859] ? sk_alloc+0x350/0x350 [ 2659.092622] ? find_held_lock+0x2c/0x110 [ 2659.093474] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2659.094584] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2659.095633] ? rawv6_exit+0x20/0x20 [ 2659.096399] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2659.097421] ? ip6_mtu+0x1e9/0x3d0 [ 2659.098154] ? ip6_setup_cork+0xfb7/0x1740 [ 2659.099034] ip6_append_data+0x1e6/0x330 [ 2659.099873] ? rawv6_exit+0x20/0x20 [ 2659.100634] ? rawv6_exit+0x20/0x20 [ 2659.101414] icmp6_send+0x1250/0x1f30 [ 2659.102222] ? icmpv6_push_pending_frames+0x470/0x470 [ 2659.103287] ? find_held_lock+0x2c/0x110 [ 2659.104161] ? ip6_dst_hoplimit+0x440/0x440 [ 2659.105076] ip6_pkt_drop+0x3d2/0x7f0 [ 2659.105872] ? ip6_pkt_discard+0x20/0x20 [ 2659.106712] ip6_local_out+0x29f/0x4c0 [ 2659.107520] ip6_send_skb+0x117/0x460 [ 2659.108316] udp_v6_send_skb+0x7b7/0x1620 [ 2659.109212] udpv6_sendmsg+0x216b/0x2b40 [ 2659.110073] ? ip_frag_init+0x350/0x350 [ 2659.110909] ? udp_v6_push_pending_frames+0x360/0x360 [ 2659.111988] ? perf_event_task_disable+0x390/0x390 [ 2659.113008] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2659.114005] ? lock_acquire+0x197/0x470 [ 2659.114820] ? find_held_lock+0x2c/0x110 [ 2659.115667] ? sock_has_perm+0x1ea/0x280 [ 2659.116527] ? __import_iovec+0x458/0x590 [ 2659.117391] ? udp_v6_push_pending_frames+0x360/0x360 [ 2659.118449] inet6_sendmsg+0x105/0x140 [ 2659.119242] ? inet6_compat_ioctl+0x320/0x320 [ 2659.120166] __sock_sendmsg+0xf2/0x190 [ 2659.120974] ____sys_sendmsg+0x334/0x870 [ 2659.121821] ? sock_write_iter+0x3d0/0x3d0 [ 2659.122698] ? do_recvmmsg+0x6d0/0x6d0 [ 2659.123516] ? __lock_acquire+0x1657/0x5b00 [ 2659.124428] ___sys_sendmsg+0xf3/0x170 [ 2659.125253] ? sendmsg_copy_msghdr+0x160/0x160 [ 2659.126217] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2659.127146] ? _raw_spin_unlock_irq+0x27/0x30 [ 2659.128083] ? lock_acquire+0x197/0x470 [ 2659.128905] ? find_held_lock+0x2c/0x110 [ 2659.129763] ? __might_fault+0xd3/0x180 [ 2659.130589] ? lock_downgrade+0x6d0/0x6d0 [ 2659.131469] __sys_sendmmsg+0x195/0x470 [ 2659.132300] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2659.133198] ? lock_downgrade+0x6d0/0x6d0 [ 2659.134067] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2659.135066] ? wait_for_completion_io+0x270/0x270 [ 2659.136060] ? rcu_read_lock_any_held+0x75/0xa0 [ 2659.137035] ? vfs_write+0x354/0xb10 [ 2659.137806] ? fput_many+0x2f/0x1a0 [ 2659.138567] ? ksys_write+0x1a9/0x260 [ 2659.139356] ? __ia32_sys_read+0xb0/0xb0 [ 2659.140202] __x64_sys_sendmmsg+0x99/0x100 [ 2659.141091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.142161] do_syscall_64+0x33/0x40 [ 2659.142933] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2659.144003] RIP: 0033:0x7fb085b27b19 [ 2659.144769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2659.148573] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2659.150146] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2659.151608] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2659.153073] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.154533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2659.155996] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:55:12 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:55:12 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x94000000) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2675.172984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15225 comm=syz-executor.2 [ 2675.188360] loop1: detected capacity change from 0 to 1536 [ 2675.217227] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:55:12 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 57) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:55:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300fffffffe000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:55:12 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400f0001200215f0000000070e600000a"], 0x24}}, 0x0) 00:55:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2c}}, 0x4000890) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:55:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4662, 0x150) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setpipe(r4, 0x407, 0x4) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) r6 = dup3(r2, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) dup3(r7, r8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201) dup3(r9, r10, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1304e5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRESOCT=r7, @ANYBLOB="a0dcffc22971c13c2c2b6b21a929ac742995959846bf5447b0e77aa482b7c07b0b7f4242307fd5621a7d7860137f3a9496fe0a0b9b5c417932cd3b5efefc449665f5405ab31d40b251197e0cd10dfe58558e3e62fd4f0353bc0ce99e54152be29740", @ANYRES64=0x0, @ANYBLOB="7f95bcd4a340de1ebc7079563409f4866d65144e34415c9eb0425ec588c12c0488300032788ddc0e14", @ANYRESOCT=r9, @ANYRES16, @ANYBLOB="64e40d7cd0c0a92b9b455457098b6ab17744fe0bcc60751bddcbfd2ad63d2bcf82b709d5fe356ead2751083aa5a6b3d54a4cee656333d36efa221e7af199d4fe71fb824d0e9d96ab539462888907143c6fa76f2ec3424c7535b3a32ae6cf5d2abfe3ce760ad2213fd400c82417a0c80bad07d85058483e5fcdc293ae876e90203409272483ed967235bd30420ef616ac1b8cbb802ae753c892934d00"/169, @ANYRESHEX=r6]) 00:55:12 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xffff000000000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:55:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2675.244737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15236 comm=syz-executor.2 [ 2675.268008] FAULT_INJECTION: forcing a failure. [ 2675.268008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2675.270638] CPU: 0 PID: 15226 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2675.270650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2675.270664] Call Trace: [ 2675.274109] dump_stack+0x107/0x167 [ 2675.274938] should_fail.cold+0x5/0xa [ 2675.275805] __alloc_pages_nodemask+0x182/0x600 [ 2675.276863] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2675.278241] ? __kmalloc_node_track_caller+0x393/0x3b0 [ 2675.279434] alloc_pages_current+0x187/0x280 [ 2675.280432] allocate_slab+0x26f/0x380 [ 2675.281328] ___slab_alloc+0x470/0x700 [ 2675.282227] ? alloc_skb_with_frags+0x92/0x570 [ 2675.283271] ? mark_held_locks+0x9e/0xe0 [ 2675.284209] ? __kmalloc_node_track_caller+0x393/0x3b0 [ 2675.285408] __kmalloc_node_track_caller+0x393/0x3b0 [ 2675.286563] ? alloc_skb_with_frags+0x92/0x570 [ 2675.287609] __alloc_skb+0xb1/0x5b0 [ 2675.288447] alloc_skb_with_frags+0x92/0x570 [ 2675.289464] ? mark_lock+0xf5/0x2df0 [ 2675.290320] ? mark_lock+0xf5/0x2df0 [ 2675.291180] sock_alloc_send_pskb+0x7af/0x930 [ 2675.292227] ? sk_alloc+0x350/0x350 [ 2675.293070] ? find_held_lock+0x2c/0x110 [ 2675.294016] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2675.295242] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2675.296411] ? rawv6_exit+0x20/0x20 [ 2675.297278] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2675.298396] ? ip6_mtu+0x1e9/0x3d0 [ 2675.299224] ? ip6_setup_cork+0xfb7/0x1740 [ 2675.300213] ip6_append_data+0x1e6/0x330 [ 2675.301163] ? rawv6_exit+0x20/0x20 [ 2675.302010] ? rawv6_exit+0x20/0x20 [ 2675.302860] icmp6_send+0x1250/0x1f30 [ 2675.303769] ? icmpv6_push_pending_frames+0x470/0x470 [ 2675.304976] ? find_held_lock+0x2c/0x110 [ 2675.305971] ? ip6_dst_hoplimit+0x440/0x440 [ 2675.306994] ip6_pkt_drop+0x3d2/0x7f0 [ 2675.307893] ? ip6_pkt_discard+0x20/0x20 [ 2675.308843] ip6_local_out+0x29f/0x4c0 [ 2675.309770] ip6_send_skb+0x117/0x460 [ 2675.310679] udp_v6_send_skb+0x7b7/0x1620 [ 2675.311676] udpv6_sendmsg+0x216b/0x2b40 [ 2675.312643] ? ip_frag_init+0x350/0x350 [ 2675.313610] ? udp_v6_push_pending_frames+0x360/0x360 [ 2675.314843] ? perf_event_task_disable+0x390/0x390 [ 2675.316012] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2675.317169] ? lock_acquire+0x197/0x470 [ 2675.318124] ? find_held_lock+0x2c/0x110 [ 2675.319116] ? sock_has_perm+0x1ea/0x280 [ 2675.320119] ? security_socket_sendmsg+0x62/0xb0 [ 2675.321267] ? security_socket_sendmsg+0x6c/0xb0 [ 2675.322405] ? udp_v6_push_pending_frames+0x360/0x360 [ 2675.323643] inet6_sendmsg+0x105/0x140 [ 2675.324574] ? inet6_compat_ioctl+0x320/0x320 [ 2675.325657] __sock_sendmsg+0xf2/0x190 [ 2675.326597] ____sys_sendmsg+0x334/0x870 [ 2675.327579] ? sock_write_iter+0x3d0/0x3d0 [ 2675.328593] ? do_recvmmsg+0x6d0/0x6d0 [ 2675.329553] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2675.330819] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2675.332117] ? trace_hardirqs_on+0x5b/0x180 [ 2675.333176] ___sys_sendmsg+0xf3/0x170 [ 2675.334121] ? sendmsg_copy_msghdr+0x160/0x160 [ 2675.335234] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2675.336323] ? _raw_spin_unlock_irq+0x27/0x30 [ 2675.337424] ? finish_task_switch+0x126/0x5d0 [ 2675.338510] ? finish_task_switch+0xef/0x5d0 [ 2675.339581] ? __switch_to+0x572/0xf70 [ 2675.340534] ? __switch_to_asm+0x3a/0x60 [ 2675.341540] ? __switch_to_asm+0x34/0x60 [ 2675.342554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2675.343842] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2675.345172] ? trace_hardirqs_on+0x5b/0x180 [ 2675.346236] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2675.347589] ? __sys_sendmmsg+0x249/0x470 [ 2675.348623] __sys_sendmmsg+0x195/0x470 [ 2675.349625] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2675.350694] ? lock_downgrade+0x6d0/0x6d0 [ 2675.351740] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2675.352944] ? wait_for_completion_io+0x270/0x270 [ 2675.354166] ? rcu_read_lock_any_held+0x75/0xa0 [ 2675.355329] ? vfs_write+0x354/0xb10 [ 2675.356265] ? fput_many+0x2f/0x1a0 [ 2675.357182] ? ksys_write+0x1a9/0x260 [ 2675.358138] ? __ia32_sys_read+0xb0/0xb0 [ 2675.359162] __x64_sys_sendmmsg+0x99/0x100 [ 2675.360113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2675.361226] do_syscall_64+0x33/0x40 [ 2675.362026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2675.363123] RIP: 0033:0x7fb085b27b19 [ 2675.363922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2675.367890] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2675.369554] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2675.371097] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2675.372657] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2675.374219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2675.375776] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:55:27 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0xffffff7f) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:55:27 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 58) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:55:27 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400ff001200215f0000000070e600000a"], 0x24}}, 0x0) 00:55:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300effdffff000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:55:27 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:55:27 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x22, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 00:55:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = open(&(0x7f0000000380)='./file0\x00', 0x4000, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x80) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x100) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) ftruncate(r3, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffffa) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x000\x00'/16]) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2}) syz_io_uring_setup(0x52dd, &(0x7f00000003c0)={0x0, 0x476d, 0x0, 0xfffffffe, 0x80}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unlinkat(r4, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="010000002200000018000000", @ANYRES32, @ANYBLOB="ff0f0000000000002e2f66696c653000"]) 00:55:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2690.774115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15258 comm=syz-executor.2 [ 2690.776257] loop1: detected capacity change from 0 to 1536 [ 2690.785084] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2690.798536] 9pnet: Insufficient options for proto=fd [ 2690.843351] cgroup2: Unknown parameter './file0' 00:55:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300fcfdffff000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2690.854094] FAULT_INJECTION: forcing a failure. [ 2690.854094] name failslab, interval 1, probability 0, space 0, times 0 [ 2690.856908] CPU: 1 PID: 15261 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2690.858422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2690.860214] Call Trace: [ 2690.860786] dump_stack+0x107/0x167 [ 2690.861590] should_fail.cold+0x5/0xa [ 2690.862412] ? __alloc_skb+0x6d/0x5b0 [ 2690.863230] should_failslab+0x5/0x20 [ 2690.864049] kmem_cache_alloc_node+0x55/0x330 [ 2690.865023] __alloc_skb+0x6d/0x5b0 [ 2690.865830] alloc_skb_with_frags+0x92/0x570 [ 2690.866788] sock_alloc_send_pskb+0x7af/0x930 [ 2690.867768] ? sk_alloc+0x350/0x350 [ 2690.868560] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2690.869726] ? lock_chain_count+0x20/0x20 [ 2690.870624] ? lock_chain_count+0x20/0x20 [ 2690.871524] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2690.872619] ? ip_frag_init+0x350/0x350 [ 2690.873505] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2690.874544] ? ip6_mtu+0x1e9/0x3d0 [ 2690.875311] ? ip6_setup_cork+0xfb7/0x1740 [ 2690.876223] ip6_make_skb+0x2df/0x4e0 [ 2690.877042] ? ip_frag_init+0x350/0x350 [ 2690.877926] ? ip_frag_init+0x350/0x350 [ 2690.878783] ? ip6_push_pending_frames+0xf0/0xf0 [ 2690.879811] ? ip6_dst_hoplimit+0x199/0x440 [ 2690.880742] ? lock_downgrade+0x6d0/0x6d0 [ 2690.881662] udpv6_sendmsg+0x2128/0x2b40 [ 2690.882550] ? ip_frag_init+0x350/0x350 [ 2690.883416] ? udp_v6_push_pending_frames+0x360/0x360 [ 2690.884524] ? mark_held_locks+0x9e/0xe0 [ 2690.885412] ? trace_hardirqs_on+0x5b/0x180 [ 2690.886350] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2690.887523] ? lock_release+0x98/0x680 [ 2690.888381] ? find_held_lock+0x2c/0x110 [ 2690.889271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2690.890410] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2690.891574] ? sock_has_perm+0x1ea/0x280 [ 2690.892464] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2690.893635] ? trace_hardirqs_on+0x5b/0x180 [ 2690.894568] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2690.895740] ? udp_v6_push_pending_frames+0x360/0x360 [ 2690.896851] inet6_sendmsg+0x105/0x140 [ 2690.897706] ? inet6_compat_ioctl+0x320/0x320 [ 2690.898675] __sock_sendmsg+0xf2/0x190 [ 2690.899527] ____sys_sendmsg+0x334/0x870 [ 2690.900414] ? sock_write_iter+0x3d0/0x3d0 [ 2690.901345] ? do_recvmmsg+0x6d0/0x6d0 [ 2690.902200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2690.903330] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2690.904488] ? trace_hardirqs_on+0x5b/0x180 [ 2690.905438] ___sys_sendmsg+0xf3/0x170 [ 2690.906283] ? sendmsg_copy_msghdr+0x160/0x160 [ 2690.907271] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2690.908237] ? _raw_spin_unlock_irq+0x27/0x30 [ 2690.909207] ? finish_task_switch+0x126/0x5d0 [ 2690.910192] ? finish_task_switch+0xef/0x5d0 [ 2690.911144] ? __switch_to+0x572/0xf70 [ 2690.911982] ? __switch_to_asm+0x3a/0x60 [ 2690.912867] ? __switch_to_asm+0x34/0x60 [ 2690.913766] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2690.914896] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2690.916053] ? trace_hardirqs_on+0x5b/0x180 [ 2690.916983] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2690.918173] ? __sys_sendmmsg+0x249/0x470 [ 2690.919081] __sys_sendmmsg+0x195/0x470 [ 2690.919951] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2690.920878] ? lock_downgrade+0x6d0/0x6d0 [ 2690.921796] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2690.922843] ? wait_for_completion_io+0x270/0x270 [ 2690.923887] ? rcu_read_lock_any_held+0x75/0xa0 [ 2690.924886] ? vfs_write+0x354/0xb10 [ 2690.925699] ? fput_many+0x2f/0x1a0 [ 2690.926477] ? ksys_write+0x1a9/0x260 [ 2690.927297] ? __ia32_sys_read+0xb0/0xb0 [ 2690.928180] __x64_sys_sendmmsg+0x99/0x100 [ 2690.929097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2690.930215] do_syscall_64+0x33/0x40 [ 2690.931016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2690.932118] RIP: 0033:0x7fb085b27b19 [ 2690.932918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2690.936911] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2690.938578] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2690.940199] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2690.941752] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2690.943298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2690.944841] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:55:27 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2690.998935] loop1: detected capacity change from 0 to 1536 [ 2691.006429] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:55:27 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:55:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:55:27 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x2c, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2691.055147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15283 comm=syz-executor.2 00:55:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300fdfdffff000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2691.063866] cgroup2: Unknown parameter './file0' [ 2691.090292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2691.095424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2691.122377] 9pnet: Insufficient options for proto=fd 00:55:28 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x9400000000000000) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2691.133652] 9pnet: Insufficient options for proto=fd 00:55:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002500215f0000000070e600000a"], 0x24}}, 0x0) [ 2691.159082] loop1: detected capacity change from 0 to 1536 [ 2691.177955] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:55:28 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 59) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:55:28 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x22, {'wfdno', 0x3d, r2}}) 00:55:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:55:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003008cffffff000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2691.256346] FAULT_INJECTION: forcing a failure. [ 2691.256346] name failslab, interval 1, probability 0, space 0, times 0 [ 2691.257780] CPU: 0 PID: 15302 Comm: syz-executor.4 Not tainted 5.10.247 #1 00:55:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2691.258521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2691.259569] Call Trace: [ 2691.259859] dump_stack+0x107/0x167 [ 2691.260250] should_fail.cold+0x5/0xa [ 2691.260687] ? create_object.isra.0+0x3a/0xa30 [ 2691.261177] should_failslab+0x5/0x20 [ 2691.261619] kmem_cache_alloc+0x5b/0x310 [ 2691.262057] ? __is_insn_slot_addr+0x14c/0x290 [ 2691.262584] create_object.isra.0+0x3a/0xa30 [ 2691.263054] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2691.263634] kmem_cache_alloc_node+0x169/0x330 [ 2691.264127] __alloc_skb+0x6d/0x5b0 [ 2691.264548] alloc_skb_with_frags+0x92/0x570 [ 2691.265026] sock_alloc_send_pskb+0x7af/0x930 [ 2691.265549] ? sk_alloc+0x350/0x350 [ 2691.265946] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2691.266504] ? lock_chain_count+0x20/0x20 [ 2691.266947] ? lock_chain_count+0x20/0x20 [ 2691.267422] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2691.267964] ? ip_frag_init+0x350/0x350 [ 2691.268394] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2691.268942] ? ip6_mtu+0x1e9/0x3d0 [ 2691.269331] ? ip6_setup_cork+0xfb7/0x1740 [ 2691.269812] ip6_make_skb+0x2df/0x4e0 [ 2691.270217] ? ip_frag_init+0x350/0x350 [ 2691.270648] ? ip_frag_init+0x350/0x350 [ 2691.271098] ? ip6_push_pending_frames+0xf0/0xf0 [ 2691.271607] ? ip6_dst_hoplimit+0x199/0x440 [ 2691.272103] ? lock_downgrade+0x6d0/0x6d0 [ 2691.272558] udpv6_sendmsg+0x2128/0x2b40 [ 2691.272996] ? ip_frag_init+0x350/0x350 [ 2691.273437] ? udp_v6_push_pending_frames+0x360/0x360 [ 2691.273996] ? perf_event_task_disable+0x390/0x390 [ 2691.274520] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2691.274871] 9pnet: Insufficient options for proto=fd [ 2691.275044] ? lock_acquire+0x197/0x470 [ 2691.276598] ? find_held_lock+0x2c/0x110 [ 2691.277037] ? sock_has_perm+0x1ea/0x280 [ 2691.277501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15305 comm=syz-executor.2 [ 2691.278786] ? __import_iovec+0x458/0x590 [ 2691.279230] ? udp_v6_push_pending_frames+0x360/0x360 [ 2691.279821] inet6_sendmsg+0x105/0x140 [ 2691.280237] ? inet6_compat_ioctl+0x320/0x320 [ 2691.280749] __sock_sendmsg+0xf2/0x190 [ 2691.281173] ____sys_sendmsg+0x334/0x870 [ 2691.281619] ? sock_write_iter+0x3d0/0x3d0 [ 2691.282099] ? do_recvmmsg+0x6d0/0x6d0 [ 2691.282517] ? __lock_acquire+0x1657/0x5b00 [ 2691.283011] ___sys_sendmsg+0xf3/0x170 [ 2691.283428] ? sendmsg_copy_msghdr+0x160/0x160 [ 2691.283915] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2691.284390] ? _raw_spin_unlock_irq+0x27/0x30 [ 2691.284871] ? lock_acquire+0x197/0x470 [ 2691.285302] ? find_held_lock+0x2c/0x110 [ 2691.285751] ? __might_fault+0xd3/0x180 [ 2691.286179] ? lock_downgrade+0x6d0/0x6d0 [ 2691.286628] __sys_sendmmsg+0x195/0x470 [ 2691.287056] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2691.287515] ? lock_downgrade+0x6d0/0x6d0 [ 2691.287964] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2691.288476] ? wait_for_completion_io+0x270/0x270 [ 2691.289029] ? rcu_read_lock_any_held+0x75/0xa0 [ 2691.289533] ? vfs_write+0x354/0xb10 [ 2691.289935] ? fput_many+0x2f/0x1a0 [ 2691.290319] ? ksys_write+0x1a9/0x260 [ 2691.290728] ? __ia32_sys_read+0xb0/0xb0 [ 2691.291162] __x64_sys_sendmmsg+0x99/0x100 [ 2691.291612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2691.292157] do_syscall_64+0x33/0x40 [ 2691.292553] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2691.293097] RIP: 0033:0x7fb085b27b19 [ 2691.293533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2691.295399] 9pnet: Insufficient options for proto=fd [ 2691.295509] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2691.297434] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2691.297440] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2691.297446] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2691.297452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2691.297458] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2691.322828] loop1: detected capacity change from 0 to 1536 [ 2691.343982] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2691.363815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000005f00215f0000000070e600000a"], 0x24}}, 0x0) 00:55:42 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 60) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:55:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:55:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300f6ffffff000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:55:42 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:55:42 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x22, r2}}) 00:55:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:55:42 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0xffffff7f00000000) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2705.702011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15328 comm=syz-executor.2 [ 2705.706258] loop1: detected capacity change from 0 to 1536 [ 2705.717338] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2705.722014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=15324 comm=syz-executor.6 [ 2705.735076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2705.749955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=15339 comm=syz-executor.6 [ 2705.759207] 9pnet: Insufficient options for proto=fd 00:55:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300feffffff000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2705.778931] FAULT_INJECTION: forcing a failure. [ 2705.778931] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.781376] CPU: 0 PID: 15332 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2705.782855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.784582] Call Trace: [ 2705.785134] dump_stack+0x107/0x167 [ 2705.785923] should_fail.cold+0x5/0xa [ 2705.786718] should_failslab+0x5/0x20 [ 2705.787514] __kmalloc_node_track_caller+0x74/0x3b0 [ 2705.788557] ? alloc_skb_with_frags+0x92/0x570 [ 2705.789534] __alloc_skb+0xb1/0x5b0 [ 2705.790310] alloc_skb_with_frags+0x92/0x570 [ 2705.791235] sock_alloc_send_pskb+0x7af/0x930 [ 2705.792177] ? sk_alloc+0x350/0x350 [ 2705.792943] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2705.794070] ? lock_chain_count+0x20/0x20 [ 2705.794934] ? lock_chain_count+0x20/0x20 [ 2705.795804] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2705.796860] ? ip_frag_init+0x350/0x350 [ 2705.797718] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2705.798719] ? ip6_mtu+0x1e9/0x3d0 [ 2705.799458] ? ip6_setup_cork+0xfb7/0x1740 [ 2705.800344] ip6_make_skb+0x2df/0x4e0 [ 2705.801135] ? ip_frag_init+0x350/0x350 [ 2705.802016] ? ip_frag_init+0x350/0x350 [ 2705.802846] ? ip6_push_pending_frames+0xf0/0xf0 [ 2705.803839] ? ip6_dst_hoplimit+0x199/0x440 [ 2705.804742] ? lock_downgrade+0x6d0/0x6d0 [ 2705.805673] udpv6_sendmsg+0x2128/0x2b40 [ 2705.806530] ? ip_frag_init+0x350/0x350 [ 2705.807372] ? udp_v6_push_pending_frames+0x360/0x360 [ 2705.808467] ? lock_acquire+0x197/0x470 [ 2705.809295] ? find_held_lock+0x2c/0x110 [ 2705.810178] ? sock_has_perm+0x1ea/0x280 [ 2705.811046] ? __import_iovec+0x458/0x590 [ 2705.811904] ? udp_v6_push_pending_frames+0x360/0x360 [ 2705.812966] inet6_sendmsg+0x105/0x140 [ 2705.813799] ? inet6_compat_ioctl+0x320/0x320 [ 2705.814737] __sock_sendmsg+0xf2/0x190 [ 2705.815542] ____sys_sendmsg+0x334/0x870 [ 2705.816388] ? sock_write_iter+0x3d0/0x3d0 [ 2705.817254] ? do_recvmmsg+0x6d0/0x6d0 [ 2705.818100] ? __lock_acquire+0x1657/0x5b00 [ 2705.819010] ___sys_sendmsg+0xf3/0x170 [ 2705.819812] ? sendmsg_copy_msghdr+0x160/0x160 [ 2705.820760] ? __fget_files+0x2cf/0x520 [ 2705.821629] ? lock_acquire+0x197/0x470 [ 2705.822452] ? find_held_lock+0x2c/0x110 [ 2705.823306] ? __might_fault+0xd3/0x180 [ 2705.824132] ? lock_downgrade+0x6d0/0x6d0 [ 2705.825024] __sys_sendmmsg+0x195/0x470 [ 2705.825888] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2705.826805] ? lock_downgrade+0x6d0/0x6d0 [ 2705.827679] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2705.828692] ? wait_for_completion_io+0x270/0x270 [ 2705.829725] ? rcu_read_lock_any_held+0x75/0xa0 [ 2705.830689] ? vfs_write+0x354/0xb10 [ 2705.831470] ? fput_many+0x2f/0x1a0 [ 2705.832223] ? ksys_write+0x1a9/0x260 [ 2705.833015] ? __ia32_sys_read+0xb0/0xb0 [ 2705.833901] __x64_sys_sendmmsg+0x99/0x100 [ 2705.834776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2705.835860] do_syscall_64+0x33/0x40 [ 2705.836638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2705.837732] RIP: 0033:0x7fb085b27b19 [ 2705.838539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.842581] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2705.844247] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2705.845832] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2705.847382] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2705.848933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2705.850505] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2705.871909] 9pnet: Insufficient options for proto=fd 00:55:42 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:55:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2705.897959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000007300215f0000000070e600000a"], 0x24}}, 0x0) [ 2705.925393] loop1: detected capacity change from 0 to 1536 [ 2705.954611] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:55:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2705.988241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=15354 comm=syz-executor.6 00:55:42 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x2c, r2}}) [ 2706.006391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15356 comm=syz-executor.2 [ 2706.030104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=15361 comm=syz-executor.6 [ 2706.087323] 9pnet: Insufficient options for proto=fd [ 2706.103706] 9pnet: Insufficient options for proto=fd 00:55:55 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:55:55 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 61) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:55:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="05000700000000"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:55:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240002001200215f0000000070e600000a"], 0x24}}, 0x0) 00:55:55 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:55:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000000", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2718.817403] FAULT_INJECTION: forcing a failure. [ 2718.817403] name failslab, interval 1, probability 0, space 0, times 0 [ 2718.819455] CPU: 1 PID: 15371 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2718.820241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2718.821184] Call Trace: [ 2718.821491] dump_stack+0x107/0x167 [ 2718.821913] should_fail.cold+0x5/0xa [ 2718.822346] should_failslab+0x5/0x20 [ 2718.822779] __kmalloc_node_track_caller+0x74/0x3b0 [ 2718.823343] ? alloc_skb_with_frags+0x92/0x570 [ 2718.823860] __alloc_skb+0xb1/0x5b0 [ 2718.824278] alloc_skb_with_frags+0x92/0x570 [ 2718.824790] sock_alloc_send_pskb+0x7af/0x930 [ 2718.825300] ? sk_alloc+0x350/0x350 [ 2718.825731] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2718.826320] ? lock_chain_count+0x20/0x20 [ 2718.826790] ? lock_chain_count+0x20/0x20 [ 2718.827261] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2718.827831] ? ip_frag_init+0x350/0x350 [ 2718.828290] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2718.828841] ? ip6_mtu+0x1e9/0x3d0 [ 2718.829242] ? ip6_setup_cork+0xfb7/0x1740 [ 2718.829729] ip6_make_skb+0x2df/0x4e0 [ 2718.830158] ? ip_frag_init+0x350/0x350 [ 2718.830505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15372 comm=syz-executor.2 [ 2718.830608] ? ip_frag_init+0x350/0x350 [ 2718.830621] ? ip6_push_pending_frames+0xf0/0xf0 [ 2718.830635] ? ip6_dst_hoplimit+0x199/0x440 [ 2718.830656] ? lock_downgrade+0x6d0/0x6d0 [ 2718.835604] udpv6_sendmsg+0x2128/0x2b40 [ 2718.836065] ? ip_frag_init+0x350/0x350 [ 2718.836520] ? udp_v6_push_pending_frames+0x360/0x360 [ 2718.837110] ? perf_event_task_disable+0x390/0x390 [ 2718.837678] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2718.838222] ? lock_acquire+0x197/0x470 [ 2718.838672] ? find_held_lock+0x2c/0x110 [ 2718.839137] ? sock_has_perm+0x1ea/0x280 [ 2718.839610] ? __import_iovec+0x458/0x590 [ 2718.840077] ? udp_v6_push_pending_frames+0x360/0x360 [ 2718.840658] inet6_sendmsg+0x105/0x140 [ 2718.841100] ? inet6_compat_ioctl+0x320/0x320 [ 2718.841618] __sock_sendmsg+0xf2/0x190 [ 2718.842069] ____sys_sendmsg+0x334/0x870 [ 2718.842530] ? sock_write_iter+0x3d0/0x3d0 [ 2718.843005] ? do_recvmmsg+0x6d0/0x6d0 [ 2718.843448] ? __lock_acquire+0x1657/0x5b00 [ 2718.843948] ___sys_sendmsg+0xf3/0x170 [ 2718.844387] ? sendmsg_copy_msghdr+0x160/0x160 [ 2718.844903] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2718.845493] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2718.846007] ? trace_hardirqs_on+0x5b/0x180 [ 2718.846497] ? lock_acquire+0x197/0x470 [ 2718.846950] ? find_held_lock+0x2c/0x110 [ 2718.847410] ? __might_fault+0xd3/0x180 [ 2718.847859] ? lock_downgrade+0x6d0/0x6d0 [ 2718.848338] __sys_sendmmsg+0x195/0x470 [ 2718.848793] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2718.849280] ? lock_downgrade+0x6d0/0x6d0 [ 2718.849765] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2718.850310] ? wait_for_completion_io+0x270/0x270 [ 2718.850859] ? rcu_read_lock_any_held+0x75/0xa0 [ 2718.851393] ? vfs_write+0x354/0xb10 [ 2718.851815] ? fput_many+0x2f/0x1a0 [ 2718.852225] ? ksys_write+0x1a9/0x260 [ 2718.852657] ? __ia32_sys_read+0xb0/0xb0 [ 2718.853118] __x64_sys_sendmmsg+0x99/0x100 [ 2718.853595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2718.854181] do_syscall_64+0x33/0x40 [ 2718.854604] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2718.855184] RIP: 0033:0x7fb085b27b19 [ 2718.855607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2718.857738] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2718.858592] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2718.859398] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2718.860206] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2718.861008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2718.861822] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:55:55 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:55:55 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x22}) [ 2718.873776] 9pnet: Insufficient options for proto=fd [ 2718.908305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2718.910226] 9pnet: Insufficient options for proto=fd 00:55:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240003001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2718.914998] loop1: detected capacity change from 0 to 1536 00:55:55 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 62) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:55:55 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2718.965056] FAULT_INJECTION: forcing a failure. [ 2718.965056] name failslab, interval 1, probability 0, space 0, times 0 [ 2718.966444] CPU: 1 PID: 15393 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2718.966472] FAT-fs (loop1): bogus number of FAT sectors [ 2718.967224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2718.967228] Call Trace: [ 2718.967246] dump_stack+0x107/0x167 [ 2718.967258] should_fail.cold+0x5/0xa [ 2718.967281] ? create_object.isra.0+0x3a/0xa30 [ 2718.968553] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2718.969471] should_failslab+0x5/0x20 [ 2718.972489] kmem_cache_alloc+0x5b/0x310 [ 2718.972952] create_object.isra.0+0x3a/0xa30 [ 2718.973445] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2718.974032] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2718.974608] ? alloc_skb_with_frags+0x92/0x570 [ 2718.975133] __alloc_skb+0xb1/0x5b0 [ 2718.975551] alloc_skb_with_frags+0x92/0x570 [ 2718.976058] sock_alloc_send_pskb+0x7af/0x930 [ 2718.976572] ? sk_alloc+0x350/0x350 [ 2718.976992] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2718.977583] ? lock_chain_count+0x20/0x20 [ 2718.978066] ? lock_chain_count+0x20/0x20 [ 2718.978540] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2718.979112] ? ip_frag_init+0x350/0x350 [ 2718.979569] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2718.980112] ? ip6_mtu+0x1e9/0x3d0 [ 2718.980511] ? ip6_setup_cork+0xfb7/0x1740 [ 2718.980988] ip6_make_skb+0x2df/0x4e0 [ 2718.981423] ? ip_frag_init+0x350/0x350 [ 2718.981887] ? ip_frag_init+0x350/0x350 [ 2718.982341] ? ip6_push_pending_frames+0xf0/0xf0 [ 2718.982879] ? ip6_dst_hoplimit+0x199/0x440 [ 2718.983364] ? lock_downgrade+0x6d0/0x6d0 [ 2718.983843] udpv6_sendmsg+0x2128/0x2b40 [ 2718.984307] ? ip_frag_init+0x350/0x350 [ 2718.984760] ? udp_v6_push_pending_frames+0x360/0x360 [ 2718.985346] ? perf_event_task_disable+0x390/0x390 [ 2718.985910] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2718.986456] ? lock_acquire+0x197/0x470 [ 2718.986909] ? find_held_lock+0x2c/0x110 [ 2718.987373] ? sock_has_perm+0x1ea/0x280 [ 2718.987859] ? __import_iovec+0x458/0x590 [ 2718.988325] ? udp_v6_push_pending_frames+0x360/0x360 [ 2718.988905] inet6_sendmsg+0x105/0x140 [ 2718.989346] ? inet6_compat_ioctl+0x320/0x320 [ 2718.989867] __sock_sendmsg+0xf2/0x190 [ 2718.990309] ____sys_sendmsg+0x334/0x870 [ 2718.990771] ? sock_write_iter+0x3d0/0x3d0 [ 2718.991245] ? do_recvmmsg+0x6d0/0x6d0 [ 2718.991696] ? __lock_acquire+0x1657/0x5b00 [ 2718.992187] ___sys_sendmsg+0xf3/0x170 [ 2718.992627] ? sendmsg_copy_msghdr+0x160/0x160 [ 2718.993143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2718.993747] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2718.994250] ? trace_hardirqs_on+0x5b/0x180 [ 2718.994743] ? lock_acquire+0x197/0x470 [ 2718.995201] ? find_held_lock+0x2c/0x110 [ 2718.995662] ? __might_fault+0xd3/0x180 [ 2718.996110] ? lock_downgrade+0x6d0/0x6d0 [ 2718.996587] __sys_sendmmsg+0x195/0x470 [ 2718.997036] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2718.997525] ? lock_downgrade+0x6d0/0x6d0 [ 2718.998010] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2718.998556] ? wait_for_completion_io+0x270/0x270 [ 2718.999103] ? rcu_read_lock_any_held+0x75/0xa0 [ 2718.999633] ? vfs_write+0x354/0xb10 [ 2719.000059] ? fput_many+0x2f/0x1a0 [ 2719.000470] ? ksys_write+0x1a9/0x260 [ 2719.000901] ? __ia32_sys_read+0xb0/0xb0 [ 2719.001360] __x64_sys_sendmmsg+0x99/0x100 [ 2719.001856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2719.002440] do_syscall_64+0x33/0x40 [ 2719.002870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2719.003460] RIP: 0033:0x7fb085b27b19 [ 2719.003885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2719.005963] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2719.006817] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2719.007615] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2719.008414] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2719.009215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2719.010023] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:55:55 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r3}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r0, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:55:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240004001200215f0000000070e600000a"], 0x24}}, 0x0) 00:55:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="05000700000000"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2719.060416] loop1: detected capacity change from 0 to 1536 00:55:56 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r3}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r0, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:55:56 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2719.107494] FAT-fs (loop1): bogus number of FAT sectors [ 2719.108704] FAT-fs (loop1): Can't find a valid FAT filesystem 00:55:56 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:55:56 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:55:56 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 63) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2719.163578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15409 comm=syz-executor.2 [ 2719.198116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2719.203943] FAULT_INJECTION: forcing a failure. [ 2719.203943] name failslab, interval 1, probability 0, space 0, times 0 [ 2719.205275] CPU: 1 PID: 15418 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2719.206071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2719.207007] Call Trace: [ 2719.207323] dump_stack+0x107/0x167 [ 2719.207739] should_fail.cold+0x5/0xa [ 2719.208175] ? create_object.isra.0+0x3a/0xa30 [ 2719.208692] should_failslab+0x5/0x20 [ 2719.209128] kmem_cache_alloc+0x5b/0x310 [ 2719.209589] ? mark_lock+0xf5/0x2df0 [ 2719.210020] create_object.isra.0+0x3a/0xa30 [ 2719.210521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2719.211103] kmem_cache_alloc_node+0x169/0x330 [ 2719.211617] ? fib6_table_lookup+0x636/0xaf0 [ 2719.212120] __alloc_skb+0x6d/0x5b0 [ 2719.212537] alloc_skb_with_frags+0x92/0x570 [ 2719.213036] ? mark_lock+0xf5/0x2df0 [ 2719.213457] ? mark_lock+0xf5/0x2df0 [ 2719.213891] sock_alloc_send_pskb+0x7af/0x930 [ 2719.214407] ? sk_alloc+0x350/0x350 [ 2719.214823] ? find_held_lock+0x2c/0x110 [ 2719.215288] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2719.215888] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2719.216460] ? rawv6_exit+0x20/0x20 [ 2719.216886] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2719.217436] ? ip6_mtu+0x1e9/0x3d0 [ 2719.217858] ? ip6_setup_cork+0xfb7/0x1740 [ 2719.218352] ip6_append_data+0x1e6/0x330 [ 2719.218811] ? rawv6_exit+0x20/0x20 [ 2719.219232] ? rawv6_exit+0x20/0x20 [ 2719.219649] icmp6_send+0x1250/0x1f30 [ 2719.220091] ? icmpv6_push_pending_frames+0x470/0x470 [ 2719.220673] ? find_held_lock+0x2c/0x110 [ 2719.221155] ? ip6_dst_hoplimit+0x440/0x440 [ 2719.221658] ip6_pkt_drop+0x3d2/0x7f0 [ 2719.222092] ? ip6_pkt_discard+0x20/0x20 [ 2719.222548] ip6_local_out+0x29f/0x4c0 [ 2719.222990] ip6_send_skb+0x117/0x460 [ 2719.223426] udp_v6_send_skb+0x7b7/0x1620 [ 2719.223909] udpv6_sendmsg+0x216b/0x2b40 [ 2719.224378] ? ip_frag_init+0x350/0x350 [ 2719.224835] ? udp_v6_push_pending_frames+0x360/0x360 [ 2719.225421] ? perf_event_task_disable+0x390/0x390 [ 2719.225987] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2719.226532] ? lock_acquire+0x197/0x470 [ 2719.226984] ? find_held_lock+0x2c/0x110 [ 2719.227456] ? sock_has_perm+0x1ea/0x280 [ 2719.227933] ? __import_iovec+0x458/0x590 [ 2719.228404] ? udp_v6_push_pending_frames+0x360/0x360 [ 2719.228987] inet6_sendmsg+0x105/0x140 [ 2719.229426] ? inet6_compat_ioctl+0x320/0x320 [ 2719.229943] __sock_sendmsg+0xf2/0x190 [ 2719.230389] ____sys_sendmsg+0x334/0x870 [ 2719.230852] ? sock_write_iter+0x3d0/0x3d0 [ 2719.231327] ? do_recvmmsg+0x6d0/0x6d0 [ 2719.231769] ? __lock_acquire+0x1657/0x5b00 [ 2719.232263] ___sys_sendmsg+0xf3/0x170 [ 2719.232705] ? sendmsg_copy_msghdr+0x160/0x160 [ 2719.233230] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2719.233831] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2719.234340] ? trace_hardirqs_on+0x5b/0x180 [ 2719.234834] ? lock_acquire+0x197/0x470 [ 2719.235286] ? find_held_lock+0x2c/0x110 [ 2719.235754] ? __might_fault+0xd3/0x180 [ 2719.236204] ? lock_downgrade+0x6d0/0x6d0 [ 2719.236686] __sys_sendmmsg+0x195/0x470 [ 2719.237136] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2719.237632] ? lock_downgrade+0x6d0/0x6d0 [ 2719.238121] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2719.238667] ? wait_for_completion_io+0x270/0x270 [ 2719.239212] ? rcu_read_lock_any_held+0x75/0xa0 [ 2719.239736] ? vfs_write+0x354/0xb10 [ 2719.240170] ? fput_many+0x2f/0x1a0 [ 2719.240582] ? ksys_write+0x1a9/0x260 [ 2719.241013] ? __ia32_sys_read+0xb0/0xb0 [ 2719.241478] __x64_sys_sendmmsg+0x99/0x100 [ 2719.241966] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2719.242550] do_syscall_64+0x33/0x40 [ 2719.242976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2719.243559] RIP: 0033:0x7fb085b27b19 [ 2719.243980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2719.246048] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2719.246904] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2719.247704] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2719.248502] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2719.249318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2719.250133] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:55:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000000000", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2719.273749] loop1: detected capacity change from 0 to 1536 [ 2719.280911] FAT-fs (loop1): bogus number of FAT sectors [ 2719.281625] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2719.299380] loop1: detected capacity change from 0 to 1536 [ 2719.303811] FAT-fs (loop1): bogus number of FAT sectors [ 2719.304425] FAT-fs (loop1): Can't find a valid FAT filesystem 00:56:11 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:56:11 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x2}}) 00:56:11 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 64) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:56:11 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r3}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r0, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:56:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="05000700000000"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:56:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000020000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:56:11 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0)={0x0, 0xfbb8, 0x0, 0x0, 0x1d1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:56:11 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240005001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2734.459919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15437 comm=syz-executor.2 00:56:11 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240006001200215f0000000070e600000a"], 0x24}}, 0x0) 00:56:11 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2734.488240] loop1: detected capacity change from 0 to 1536 [ 2734.500575] FAULT_INJECTION: forcing a failure. [ 2734.500575] name failslab, interval 1, probability 0, space 0, times 0 [ 2734.501925] CPU: 0 PID: 15446 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2734.502715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2734.503203] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2734.503655] Call Trace: [ 2734.503674] dump_stack+0x107/0x167 [ 2734.503688] should_fail.cold+0x5/0xa [ 2734.503702] should_failslab+0x5/0x20 [ 2734.503725] __kmalloc_node_track_caller+0x74/0x3b0 [ 2734.507783] ? alloc_skb_with_frags+0x92/0x570 [ 2734.508311] ? fib6_table_lookup+0x636/0xaf0 [ 2734.508817] __alloc_skb+0xb1/0x5b0 [ 2734.509245] alloc_skb_with_frags+0x92/0x570 [ 2734.509758] ? mark_lock+0xf5/0x2df0 [ 2734.510189] ? mark_lock+0xf5/0x2df0 [ 2734.510627] sock_alloc_send_pskb+0x7af/0x930 [ 2734.511154] ? sk_alloc+0x350/0x350 [ 2734.511574] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2734.512206] ? __ip6_append_data.isra.0+0x2b57/0x3b90 [ 2734.512807] ? __ip6_append_data.isra.0+0x2c98/0x3b90 [ 2734.513412] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2734.513996] ? rawv6_exit+0x20/0x20 [ 2734.514415] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2734.514956] ? ip6_mtu+0x1e9/0x3d0 [ 2734.515369] ? ip6_setup_cork+0xfb7/0x1740 [ 2734.515852] ip6_append_data+0x1e6/0x330 [ 2734.516119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2734.516313] ? rawv6_exit+0x20/0x20 [ 2734.516331] ? rawv6_exit+0x20/0x20 [ 2734.519162] icmp6_send+0x1250/0x1f30 [ 2734.519610] ? icmpv6_push_pending_frames+0x470/0x470 [ 2734.520194] ? find_held_lock+0x2c/0x110 [ 2734.520681] ? ip6_dst_hoplimit+0x440/0x440 [ 2734.521177] ip6_pkt_drop+0x3d2/0x7f0 [ 2734.521619] ? ip6_pkt_discard+0x20/0x20 [ 2734.522083] ip6_local_out+0x29f/0x4c0 [ 2734.522538] ip6_send_skb+0x117/0x460 [ 2734.522983] udp_v6_send_skb+0x7b7/0x1620 [ 2734.523462] udpv6_sendmsg+0x216b/0x2b40 [ 2734.523927] ? ip_frag_init+0x350/0x350 [ 2734.524394] ? udp_v6_push_pending_frames+0x360/0x360 [ 2734.524991] ? perf_event_task_disable+0x390/0x390 [ 2734.525550] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2734.526119] ? lock_acquire+0x197/0x470 [ 2734.526571] ? find_held_lock+0x2c/0x110 [ 2734.527047] ? sock_has_perm+0x1ea/0x280 [ 2734.527526] ? __import_iovec+0x458/0x590 [ 2734.527999] ? udp_v6_push_pending_frames+0x360/0x360 [ 2734.528596] inet6_sendmsg+0x105/0x140 [ 2734.529038] ? inet6_compat_ioctl+0x320/0x320 [ 2734.529549] __sock_sendmsg+0xf2/0x190 [ 2734.529995] ____sys_sendmsg+0x334/0x870 [ 2734.530463] ? sock_write_iter+0x3d0/0x3d0 [ 2734.530948] ? do_recvmmsg+0x6d0/0x6d0 [ 2734.531393] ? __lock_acquire+0x1657/0x5b00 [ 2734.531889] ___sys_sendmsg+0xf3/0x170 [ 2734.532332] ? sendmsg_copy_msghdr+0x160/0x160 [ 2734.532862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2734.533457] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2734.533982] ? trace_hardirqs_on+0x5b/0x180 [ 2734.534477] ? lock_acquire+0x197/0x470 [ 2734.534928] ? find_held_lock+0x2c/0x110 [ 2734.535394] ? __might_fault+0xd3/0x180 [ 2734.535848] ? lock_downgrade+0x6d0/0x6d0 [ 2734.536326] __sys_sendmmsg+0x195/0x470 [ 2734.536789] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2734.537278] ? lock_downgrade+0x6d0/0x6d0 [ 2734.537764] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2734.538320] ? wait_for_completion_io+0x270/0x270 [ 2734.538883] ? rcu_read_lock_any_held+0x75/0xa0 [ 2734.539411] ? vfs_write+0x354/0xb10 [ 2734.539841] ? fput_many+0x2f/0x1a0 [ 2734.540253] ? ksys_write+0x1a9/0x260 [ 2734.540693] ? __ia32_sys_read+0xb0/0xb0 [ 2734.541158] __x64_sys_sendmmsg+0x99/0x100 [ 2734.541647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2734.542238] do_syscall_64+0x33/0x40 [ 2734.542670] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2734.543252] RIP: 0033:0x7fb085b27b19 [ 2734.543687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2734.545768] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2734.546661] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2734.547483] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2734.548310] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2734.549130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2734.549960] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:56:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000030000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:56:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="05000700000000000500"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2734.592530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15455 comm=syz-executor.2 00:56:11 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2734.621155] loop1: detected capacity change from 0 to 1536 [ 2734.626951] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2734.663737] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:26 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x3}}) 00:56:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240007001200215f0000000070e600000a"], 0x24}}, 0x0) 00:56:26 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 65) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:56:26 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:56:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:56:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000040000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:56:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="05000700000000000500"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2749.276965] loop1: detected capacity change from 0 to 1536 [ 2749.283162] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2749.307389] FAULT_INJECTION: forcing a failure. [ 2749.307389] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.309901] CPU: 1 PID: 15482 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2749.311401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.313183] Call Trace: [ 2749.313761] dump_stack+0x107/0x167 [ 2749.314560] should_fail.cold+0x5/0xa [ 2749.315000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15487 comm=syz-executor.2 [ 2749.315391] ? create_object.isra.0+0x3a/0xa30 [ 2749.319082] should_failslab+0x5/0x20 [ 2749.319908] kmem_cache_alloc+0x5b/0x310 [ 2749.320791] create_object.isra.0+0x3a/0xa30 [ 2749.321736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2749.322850] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2749.323944] ? alloc_skb_with_frags+0x92/0x570 [ 2749.324932] ? fib6_table_lookup+0x636/0xaf0 [ 2749.325890] __alloc_skb+0xb1/0x5b0 [ 2749.326694] alloc_skb_with_frags+0x92/0x570 [ 2749.327648] ? mark_lock+0xf5/0x2df0 [ 2749.328456] ? mark_lock+0xf5/0x2df0 00:56:26 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x61) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x628, &(0x7f00000002c0)={0x0, 0x4087bf, 0x1, 0x80}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fea000/0x14000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0xc2b, 0x3, 0x3}, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1fd) openat(0xffffffffffffffff, 0x0, 0x610002, 0x11f) [ 2749.329266] sock_alloc_send_pskb+0x7af/0x930 [ 2749.330490] ? sk_alloc+0x350/0x350 [ 2749.331273] ? find_held_lock+0x2c/0x110 [ 2749.332148] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2749.333282] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2749.333317] ? rawv6_exit+0x20/0x20 [ 2749.335241] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2749.336271] ? ip6_mtu+0x1e9/0x3d0 [ 2749.337040] ? ip6_setup_cork+0xfb7/0x1740 [ 2749.337951] ip6_append_data+0x1e6/0x330 [ 2749.338827] ? rawv6_exit+0x20/0x20 [ 2749.339614] ? rawv6_exit+0x20/0x20 [ 2749.340404] icmp6_send+0x1250/0x1f30 [ 2749.341244] ? icmpv6_push_pending_frames+0x470/0x470 [ 2749.342368] ? find_held_lock+0x2c/0x110 [ 2749.343277] ? ip6_dst_hoplimit+0x440/0x440 [ 2749.344216] ip6_pkt_drop+0x3d2/0x7f0 [ 2749.345038] ? ip6_pkt_discard+0x20/0x20 [ 2749.345914] ip6_local_out+0x29f/0x4c0 [ 2749.346763] ip6_send_skb+0x117/0x460 [ 2749.347591] udp_v6_send_skb+0x7b7/0x1620 [ 2749.348497] udpv6_sendmsg+0x216b/0x2b40 [ 2749.349371] ? ip_frag_init+0x350/0x350 [ 2749.350245] ? udp_v6_push_pending_frames+0x360/0x360 [ 2749.351358] ? perf_event_task_disable+0x390/0x390 [ 2749.352414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2749.353544] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2749.354711] ? trace_hardirqs_on+0x5b/0x180 [ 2749.355640] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2749.356817] ? sock_has_perm+0x1ea/0x280 [ 2749.357721] ? __import_iovec+0x458/0x590 [ 2749.358633] ? udp_v6_push_pending_frames+0x360/0x360 [ 2749.359751] inet6_sendmsg+0x105/0x140 [ 2749.360587] ? inet6_compat_ioctl+0x320/0x320 [ 2749.361550] __sock_sendmsg+0xf2/0x190 [ 2749.362402] ____sys_sendmsg+0x334/0x870 [ 2749.363279] ? sock_write_iter+0x3d0/0x3d0 [ 2749.364188] ? do_recvmmsg+0x6d0/0x6d0 [ 2749.365034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2749.366179] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2749.367333] ? trace_hardirqs_on+0x5b/0x180 [ 2749.368272] ___sys_sendmsg+0xf3/0x170 [ 2749.369108] ? sendmsg_copy_msghdr+0x160/0x160 [ 2749.370098] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2749.371063] ? _raw_spin_unlock_irq+0x27/0x30 [ 2749.372032] ? finish_task_switch+0x126/0x5d0 [ 2749.372992] ? finish_task_switch+0xef/0x5d0 [ 2749.373930] ? __switch_to+0x572/0xf70 [ 2749.374773] ? __switch_to_asm+0x3a/0x60 [ 2749.375648] ? __switch_to_asm+0x34/0x60 [ 2749.376520] ? __schedule+0x82c/0x1ea0 [ 2749.377362] ? io_schedule_timeout+0x140/0x140 [ 2749.378363] __sys_sendmmsg+0x195/0x470 [ 2749.379219] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2749.380150] ? lock_downgrade+0x6d0/0x6d0 [ 2749.381062] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2749.382108] ? wait_for_completion_io+0x270/0x270 [ 2749.383145] ? rcu_read_lock_any_held+0x75/0xa0 [ 2749.384148] ? vfs_write+0x354/0xb10 [ 2749.384948] ? fput_many+0x2f/0x1a0 [ 2749.385735] ? ksys_write+0x1a9/0x260 [ 2749.386570] ? __ia32_sys_read+0xb0/0xb0 [ 2749.386597] __x64_sys_sendmmsg+0x99/0x100 [ 2749.386619] ? syscall_enter_from_user_mode+0x1d/0x50 00:56:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2749.386637] do_syscall_64+0x33/0x40 00:56:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240008001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2749.386658] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.386671] RIP: 0033:0x7fb085b27b19 00:56:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000050000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:56:26 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2749.386690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.386701] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2749.386723] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2749.386735] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2749.386746] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.386758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2749.386770] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2749.448013] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2749.474927] loop1: detected capacity change from 0 to 1536 [ 2749.498728] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:56:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="05000700000000000500"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:56:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000060000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:56:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240009001200215f0000000070e600000a"], 0x24}}, 0x0) 00:56:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2749.616289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15511 comm=syz-executor.2 [ 2749.622981] loop1: detected capacity change from 0 to 1536 [ 2749.694433] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2749.729331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2763.040149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15530 comm=syz-executor.2 00:56:39 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x7}}) 00:56:39 executing program 5: r0 = syz_io_uring_setup(0x3a88, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:56:39 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 66) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:56:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000f001200215f0000000070e600000a"], 0x24}}, 0x0) 00:56:39 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) dup3(r0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:56:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:56:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000070000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:56:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2763.065064] loop1: detected capacity change from 0 to 1536 [ 2763.074106] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2763.080398] FAULT_INJECTION: forcing a failure. [ 2763.080398] name failslab, interval 1, probability 0, space 0, times 0 [ 2763.081848] CPU: 0 PID: 15531 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2763.082724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2763.083763] Call Trace: [ 2763.084100] dump_stack+0x107/0x167 [ 2763.084559] should_fail.cold+0x5/0xa [ 2763.085042] should_failslab+0x5/0x20 [ 2763.085520] __kmalloc_node_track_caller+0x74/0x3b0 [ 2763.086159] ? alloc_skb_with_frags+0x92/0x570 [ 2763.086730] ? fib6_table_lookup+0x636/0xaf0 [ 2763.087289] __alloc_skb+0xb1/0x5b0 [ 2763.087748] alloc_skb_with_frags+0x92/0x570 [ 2763.088308] ? mark_lock+0xf5/0x2df0 [ 2763.088774] ? mark_lock+0xf5/0x2df0 [ 2763.089243] sock_alloc_send_pskb+0x7af/0x930 [ 2763.089810] ? sk_alloc+0x350/0x350 [ 2763.090279] ? find_held_lock+0x2c/0x110 [ 2763.090789] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2763.091451] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2763.092087] ? rawv6_exit+0x20/0x20 [ 2763.092550] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2763.093157] ? ip6_mtu+0x1e9/0x3d0 [ 2763.093599] ? ip6_setup_cork+0xfb7/0x1740 [ 2763.094126] ip6_append_data+0x1e6/0x330 [ 2763.094641] ? rawv6_exit+0x20/0x20 [ 2763.095097] ? rawv6_exit+0x20/0x20 [ 2763.095555] icmp6_send+0x1250/0x1f30 [ 2763.096041] ? icmpv6_push_pending_frames+0x470/0x470 [ 2763.096679] ? find_held_lock+0x2c/0x110 [ 2763.097202] ? ip6_dst_hoplimit+0x440/0x440 [ 2763.097742] ip6_pkt_drop+0x3d2/0x7f0 [ 2763.098229] ? ip6_pkt_discard+0x20/0x20 00:56:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2763.098732] ip6_local_out+0x29f/0x4c0 [ 2763.099386] ip6_send_skb+0x117/0x460 [ 2763.099862] udp_v6_send_skb+0x7b7/0x1620 [ 2763.100387] udpv6_sendmsg+0x216b/0x2b40 [ 2763.100895] ? ip_frag_init+0x350/0x350 [ 2763.101396] ? udp_v6_push_pending_frames+0x360/0x360 [ 2763.102043] ? perf_event_task_disable+0x390/0x390 [ 2763.102666] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2763.103270] ? lock_acquire+0x197/0x470 [ 2763.103763] ? find_held_lock+0x2c/0x110 [ 2763.104275] ? sock_has_perm+0x1ea/0x280 [ 2763.104795] ? __import_iovec+0x458/0x590 [ 2763.105310] ? udp_v6_push_pending_frames+0x360/0x360 [ 2763.105951] inet6_sendmsg+0x105/0x140 [ 2763.106444] ? inet6_compat_ioctl+0x320/0x320 [ 2763.107002] __sock_sendmsg+0xf2/0x190 [ 2763.107486] ____sys_sendmsg+0x334/0x870 [ 2763.107994] ? sock_write_iter+0x3d0/0x3d0 [ 2763.108515] ? do_recvmmsg+0x6d0/0x6d0 [ 2763.109000] ? __lock_acquire+0x1657/0x5b00 [ 2763.109541] ___sys_sendmsg+0xf3/0x170 [ 2763.110028] ? sendmsg_copy_msghdr+0x160/0x160 [ 2763.110603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2763.111255] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2763.111811] ? trace_hardirqs_on+0x5b/0x180 [ 2763.112351] ? lock_acquire+0x197/0x470 [ 2763.112844] ? find_held_lock+0x2c/0x110 [ 2763.113351] ? __might_fault+0xd3/0x180 [ 2763.113848] ? lock_downgrade+0x6d0/0x6d0 [ 2763.114384] __sys_sendmmsg+0x195/0x470 [ 2763.114879] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2763.115413] ? lock_downgrade+0x6d0/0x6d0 [ 2763.115932] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2763.116527] ? wait_for_completion_io+0x270/0x270 [ 2763.117122] ? rcu_read_lock_any_held+0x75/0xa0 [ 2763.117695] ? vfs_write+0x354/0xb10 [ 2763.118163] ? fput_many+0x2f/0x1a0 [ 2763.118610] ? ksys_write+0x1a9/0x260 [ 2763.119081] ? __ia32_sys_read+0xb0/0xb0 [ 2763.119585] __x64_sys_sendmmsg+0x99/0x100 [ 2763.120105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2763.120737] do_syscall_64+0x33/0x40 [ 2763.121193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2763.121819] RIP: 0033:0x7fb085b27b19 [ 2763.122287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2763.124540] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2763.125477] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2763.126357] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2763.127232] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2763.128103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2763.128981] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:56:40 executing program 5: r0 = syz_io_uring_setup(0x3a88, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:56:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2763.141413] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:40 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240048001200215f0000000070e600000a"], 0x24}}, 0x0) 00:56:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000080000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:56:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:56:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2763.232795] loop1: detected capacity change from 0 to 1536 [ 2763.234292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15562 comm=syz-executor.2 00:56:40 executing program 5: r0 = syz_io_uring_setup(0x3a88, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2763.252825] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2763.278328] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2781.161653] loop1: detected capacity change from 0 to 1536 [ 2781.166359] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:56:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) 00:56:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24004c001200215f0000000070e600000a"], 0x24}}, 0x0) 00:56:58 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x8}}) 00:56:58 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 67) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:56:58 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x98332, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480)={0x0, 0x2434, 0x0, 0x3, 0x385}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:56:58 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r2, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:56:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:56:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300000b0000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:56:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000180000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2781.198389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15586 comm=syz-executor.2 [ 2781.220839] loop1: detected capacity change from 0 to 1536 [ 2781.235976] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:56:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2781.257501] FAULT_INJECTION: forcing a failure. [ 2781.257501] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.260812] CPU: 1 PID: 15594 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2781.262303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.264118] Call Trace: 00:56:58 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r2, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2781.264711] dump_stack+0x107/0x167 [ 2781.265658] should_fail.cold+0x5/0xa [ 2781.266518] ? __alloc_skb+0x6d/0x5b0 [ 2781.267359] should_failslab+0x5/0x20 [ 2781.268204] kmem_cache_alloc_node+0x55/0x330 [ 2781.269330] __alloc_skb+0x6d/0x5b0 [ 2781.270130] alloc_skb_with_frags+0x92/0x570 [ 2781.271286] sock_alloc_send_pskb+0x7af/0x930 [ 2781.272260] ? sk_alloc+0x350/0x350 [ 2781.273054] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2781.274178] ? lock_chain_count+0x20/0x20 [ 2781.275074] ? lock_chain_count+0x20/0x20 [ 2781.275967] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2781.277053] ? ip_frag_init+0x350/0x350 [ 2781.277917] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2781.278961] ? ip6_mtu+0x1e9/0x3d0 [ 2781.279714] ? ip6_setup_cork+0xfb7/0x1740 [ 2781.280628] ip6_make_skb+0x2df/0x4e0 [ 2781.281437] ? ip_frag_init+0x350/0x350 [ 2781.282286] ? ip_frag_init+0x350/0x350 [ 2781.283147] ? ip6_push_pending_frames+0xf0/0xf0 [ 2781.284156] ? ip6_dst_hoplimit+0x199/0x440 [ 2781.285067] ? lock_downgrade+0x6d0/0x6d0 [ 2781.285952] udpv6_sendmsg+0x2128/0x2b40 [ 2781.286847] ? ip_frag_init+0x350/0x350 [ 2781.287705] ? udp_v6_push_pending_frames+0x360/0x360 [ 2781.288810] ? perf_event_task_disable+0x390/0x390 [ 2781.289850] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2781.290871] ? lock_acquire+0x197/0x470 [ 2781.291741] ? find_held_lock+0x2c/0x110 [ 2781.292614] ? sock_has_perm+0x1ea/0x280 [ 2781.293497] ? __import_iovec+0x458/0x590 [ 2781.294386] ? udp_v6_push_pending_frames+0x360/0x360 [ 2781.295481] inet6_sendmsg+0x105/0x140 00:56:58 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r2, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2781.296309] ? inet6_compat_ioctl+0x320/0x320 [ 2781.297467] __sock_sendmsg+0xf2/0x190 [ 2781.298310] ____sys_sendmsg+0x334/0x870 [ 2781.299178] ? sock_write_iter+0x3d0/0x3d0 [ 2781.300074] ? do_recvmmsg+0x6d0/0x6d0 [ 2781.300909] ? __lock_acquire+0x1657/0x5b00 [ 2781.301830] ___sys_sendmsg+0xf3/0x170 [ 2781.302677] ? sendmsg_copy_msghdr+0x160/0x160 [ 2781.303856] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2781.304837] ? _raw_spin_unlock_irq+0x27/0x30 [ 2781.305800] ? lock_acquire+0x197/0x470 [ 2781.306659] ? find_held_lock+0x2c/0x110 [ 2781.307546] ? __might_fault+0xd3/0x180 [ 2781.308394] ? lock_downgrade+0x6d0/0x6d0 [ 2781.309298] __sys_sendmmsg+0x195/0x470 [ 2781.310161] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2781.311297] ? lock_downgrade+0x6d0/0x6d0 [ 2781.312193] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2781.313209] ? wait_for_completion_io+0x270/0x270 [ 2781.314270] ? rcu_read_lock_any_held+0x75/0xa0 [ 2781.315281] ? vfs_write+0x354/0xb10 [ 2781.316065] ? fput_many+0x2f/0x1a0 [ 2781.316866] ? ksys_write+0x1a9/0x260 [ 2781.317695] ? __ia32_sys_read+0xb0/0xb0 [ 2781.318715] __x64_sys_sendmmsg+0x99/0x100 [ 2781.319610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2781.320726] do_syscall_64+0x33/0x40 [ 2781.321498] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.322619] RIP: 0033:0x7fb085b27b19 [ 2781.323440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.327926] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2781.329653] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2781.331267] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2781.332842] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.334394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.335981] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2781.356514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:57:12 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x9}}) 00:57:12 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r2, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:57:12 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 68) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:57:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300001c0000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:57:12 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240068001200215f0000000070e600000a"], 0x24}}, 0x0) 00:57:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:57:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, 0x0, 0x0) 00:57:12 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) dup3(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="a48a48117fe0bd28a4126db451ee4b", 0xf}], 0x1}}], 0x1, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000280)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19ab, &(0x7f0000003480)={0x0, 0x1, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd=r2, 0x2b, &(0x7f0000000340)="e1ff1df0502540ef095032cedf6ffcfb3ae80f645fe2953cd807e9d451eab0f0aa00018403babb1ef3a3642e55be090e8017adda4178d8b4fe57afd10e1060460755da1a64a2273b3d2cb94d8b17c9c3c649ea9af1516fa373d0edf3ad64d8119fb77dc329ac19e40210457d981dc6186cab22eaa55d0aaec0ad87f56eb3b38bc309c9edcb327c11beb05078b37e5e6711f7f1a76eb77a86eb4ad8d1ba905b3169fcb6e7da1f7aa3f9d484296fcb", 0xae, 0x1, 0x1}, 0xffffffff) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2795.815961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15621 comm=syz-executor.2 [ 2795.832903] loop1: detected capacity change from 0 to 1536 [ 2795.844893] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:57:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2795.881319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15633 comm=syz-executor.2 [ 2795.893214] FAULT_INJECTION: forcing a failure. [ 2795.893214] name failslab, interval 1, probability 0, space 0, times 0 [ 2795.895841] CPU: 0 PID: 15614 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2795.897299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2795.899054] Call Trace: [ 2795.899626] dump_stack+0x107/0x167 [ 2795.900390] should_fail.cold+0x5/0xa [ 2795.901201] ? create_object.isra.0+0x3a/0xa30 [ 2795.902156] should_failslab+0x5/0x20 [ 2795.902959] kmem_cache_alloc+0x5b/0x310 [ 2795.903829] ? __is_insn_slot_addr+0x14c/0x290 [ 2795.904791] create_object.isra.0+0x3a/0xa30 [ 2795.905720] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2795.906803] kmem_cache_alloc_node+0x169/0x330 [ 2795.907773] __alloc_skb+0x6d/0x5b0 [ 2795.908541] alloc_skb_with_frags+0x92/0x570 [ 2795.909477] sock_alloc_send_pskb+0x7af/0x930 [ 2795.910421] ? sk_alloc+0x350/0x350 [ 2795.911203] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2795.912312] ? lock_chain_count+0x20/0x20 [ 2795.913189] ? lock_chain_count+0x20/0x20 [ 2795.914075] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2795.915148] ? ip_frag_init+0x350/0x350 [ 2795.916001] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2795.917024] ? ip6_mtu+0x1e9/0x3d0 [ 2795.917767] ? ip6_setup_cork+0xfb7/0x1740 [ 2795.918662] ip6_make_skb+0x2df/0x4e0 [ 2795.919463] ? ip_frag_init+0x350/0x350 [ 2795.920313] ? ip_frag_init+0x350/0x350 [ 2795.921157] ? ip6_push_pending_frames+0xf0/0xf0 [ 2795.922150] ? ip6_dst_hoplimit+0x199/0x440 [ 2795.923064] ? lock_downgrade+0x6d0/0x6d0 [ 2795.923970] udpv6_sendmsg+0x2128/0x2b40 [ 2795.924841] ? ip_frag_init+0x350/0x350 [ 2795.925694] ? udp_v6_push_pending_frames+0x360/0x360 [ 2795.926790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2795.927897] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2795.929041] ? lock_acquire+0x197/0x470 [ 2795.929871] ? find_held_lock+0x2c/0x110 [ 2795.930744] ? sock_has_perm+0x1ea/0x280 [ 2795.931624] ? __import_iovec+0x458/0x590 [ 2795.932499] ? udp_v6_push_pending_frames+0x360/0x360 [ 2795.933580] inet6_sendmsg+0x105/0x140 00:57:12 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r2, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2795.934394] ? inet6_compat_ioctl+0x320/0x320 [ 2795.935524] __sock_sendmsg+0xf2/0x190 [ 2795.936347] ____sys_sendmsg+0x334/0x870 [ 2795.937208] ? sock_write_iter+0x3d0/0x3d0 [ 2795.938094] ? do_recvmmsg+0x6d0/0x6d0 [ 2795.939049] ? __lock_acquire+0x1657/0x5b00 [ 2795.940249] ___sys_sendmsg+0xf3/0x170 [ 2795.941310] ? sendmsg_copy_msghdr+0x160/0x160 [ 2795.942568] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2795.943801] ? _raw_spin_unlock_irq+0x27/0x30 [ 2795.945047] ? lock_acquire+0x197/0x470 [ 2795.946142] ? find_held_lock+0x2c/0x110 [ 2795.947166] ? __might_fault+0xd3/0x180 [ 2795.948059] ? lock_downgrade+0x6d0/0x6d0 [ 2795.949109] __sys_sendmmsg+0x195/0x470 [ 2795.949975] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2795.950918] ? lock_downgrade+0x6d0/0x6d0 [ 2795.951839] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2795.952964] ? wait_for_completion_io+0x270/0x270 [ 2795.953975] ? rcu_read_lock_any_held+0x75/0xa0 [ 2795.954953] ? vfs_write+0x354/0xb10 [ 2795.955743] ? fput_many+0x2f/0x1a0 [ 2795.956513] ? ksys_write+0x1a9/0x260 [ 2795.957313] ? __ia32_sys_read+0xb0/0xb0 [ 2795.958174] __x64_sys_sendmmsg+0x99/0x100 [ 2795.959082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2795.960178] do_syscall_64+0x33/0x40 [ 2795.960968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2795.962040] RIP: 0033:0x7fb085b27b19 [ 2795.962830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2795.966716] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2795.968319] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2795.969813] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 00:57:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, 0x0, 0x0) 00:57:12 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r2, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2795.971343] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.972943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2795.974442] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:57:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:57:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000630000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:57:12 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24006c001200215f0000000070e600000a"], 0x24}}, 0x0) 00:57:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, 0x0, 0x0) [ 2796.086047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15646 comm=syz-executor.2 [ 2796.127208] loop1: detected capacity change from 0 to 1536 [ 2796.134686] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:57:28 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0xa}}) 00:57:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 00:57:28 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) dup3(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x521f41, 0x0) 00:57:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240074001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2811.432762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15671 comm=syz-executor.2 00:57:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000300000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:57:28 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:57:28 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 69) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:57:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2811.447908] loop1: detected capacity change from 0 to 1536 [ 2811.453262] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2811.478378] FAULT_INJECTION: forcing a failure. [ 2811.478378] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.480358] CPU: 0 PID: 15674 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2811.481526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.482880] Call Trace: [ 2811.483329] dump_stack+0x107/0x167 [ 2811.483924] should_fail.cold+0x5/0xa [ 2811.484577] should_failslab+0x5/0x20 [ 2811.485226] __kmalloc_node_track_caller+0x74/0x3b0 [ 2811.486056] ? alloc_skb_with_frags+0x92/0x570 [ 2811.486836] __alloc_skb+0xb1/0x5b0 [ 2811.487440] alloc_skb_with_frags+0x92/0x570 [ 2811.488168] sock_alloc_send_pskb+0x7af/0x930 [ 2811.488944] ? sk_alloc+0x350/0x350 [ 2811.489577] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2811.490421] ? lock_chain_count+0x20/0x20 [ 2811.491132] ? lock_chain_count+0x20/0x20 [ 2811.491835] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2811.492678] ? ip_frag_init+0x350/0x350 [ 2811.493362] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2811.494137] ? ip6_mtu+0x1e9/0x3d0 [ 2811.494730] ? ip6_setup_cork+0xfb7/0x1740 [ 2811.495414] ip6_make_skb+0x2df/0x4e0 [ 2811.496060] ? ip_frag_init+0x350/0x350 [ 2811.496704] ? ip_frag_init+0x350/0x350 [ 2811.497368] ? ip6_push_pending_frames+0xf0/0xf0 [ 2811.498167] ? ip6_dst_hoplimit+0x199/0x440 [ 2811.498902] ? lock_downgrade+0x6d0/0x6d0 [ 2811.499610] udpv6_sendmsg+0x2128/0x2b40 [ 2811.500293] ? ip_frag_init+0x350/0x350 [ 2811.500962] ? udp_v6_push_pending_frames+0x360/0x360 [ 2811.501830] ? perf_event_task_disable+0x390/0x390 [ 2811.502631] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2811.503452] ? lock_acquire+0x197/0x470 [ 2811.504125] ? find_held_lock+0x2c/0x110 [ 2811.504817] ? sock_has_perm+0x1ea/0x280 [ 2811.505502] ? __import_iovec+0x458/0x590 [ 2811.506193] ? udp_v6_push_pending_frames+0x360/0x360 [ 2811.507063] inet6_sendmsg+0x105/0x140 [ 2811.507690] ? inet6_compat_ioctl+0x320/0x320 [ 2811.508444] __sock_sendmsg+0xf2/0x190 [ 2811.509098] ____sys_sendmsg+0x334/0x870 [ 2811.509776] ? sock_write_iter+0x3d0/0x3d0 [ 2811.510456] ? do_recvmmsg+0x6d0/0x6d0 [ 2811.511110] ? __lock_acquire+0x1657/0x5b00 [ 2811.511833] ___sys_sendmsg+0xf3/0x170 [ 2811.512489] ? sendmsg_copy_msghdr+0x160/0x160 [ 2811.513240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2811.514112] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2811.514861] ? trace_hardirqs_on+0x5b/0x180 [ 2811.515592] ? lock_acquire+0x197/0x470 [ 2811.516258] ? find_held_lock+0x2c/0x110 [ 2811.516933] ? __might_fault+0xd3/0x180 [ 2811.517594] ? lock_downgrade+0x6d0/0x6d0 [ 2811.518280] __sys_sendmmsg+0x195/0x470 [ 2811.518958] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2811.519679] ? lock_downgrade+0x6d0/0x6d0 [ 2811.520365] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2811.521159] ? wait_for_completion_io+0x270/0x270 [ 2811.521955] ? rcu_read_lock_any_held+0x75/0xa0 [ 2811.522737] ? vfs_write+0x354/0xb10 [ 2811.523345] ? fput_many+0x2f/0x1a0 [ 2811.523935] ? ksys_write+0x1a9/0x260 [ 2811.524583] ? __ia32_sys_read+0xb0/0xb0 [ 2811.525255] __x64_sys_sendmmsg+0x99/0x100 [ 2811.525949] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.526812] do_syscall_64+0x33/0x40 [ 2811.527418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2811.528282] RIP: 0033:0x7fb085b27b19 [ 2811.528894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.531906] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2811.533148] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2811.534310] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2811.535465] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.536612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.537779] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:57:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2811.587898] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:57:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000800400000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:57:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24007a001200215f0000000070e600000a"], 0x24}}, 0x0) 00:57:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:57:28 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2811.675377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15693 comm=syz-executor.2 [ 2811.681072] loop1: detected capacity change from 0 to 1536 [ 2811.694896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:57:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2811.718843] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:57:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:57:28 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3747, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2811.762941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15704 comm=syz-executor.2 [ 2811.838908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:57:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400f0001200215f0000000070e600000a"], 0x24}}, 0x0) [ 2829.708958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15724 comm=syz-executor.2 00:57:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) 00:57:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000500000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:57:46 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:57:46 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 70) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:57:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:57:46 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0xb}}) [ 2829.720700] loop1: detected capacity change from 0 to 1536 [ 2829.733922] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2829.745512] FAULT_INJECTION: forcing a failure. [ 2829.745512] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.748375] CPU: 1 PID: 15716 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2829.749906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 00:57:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) [ 2829.751757] Call Trace: [ 2829.752484] dump_stack+0x107/0x167 [ 2829.753300] should_fail.cold+0x5/0xa [ 2829.754140] ? create_object.isra.0+0x3a/0xa30 [ 2829.755157] should_failslab+0x5/0x20 [ 2829.755993] kmem_cache_alloc+0x5b/0x310 [ 2829.756893] create_object.isra.0+0x3a/0xa30 [ 2829.757862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.758995] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2829.760107] ? alloc_skb_with_frags+0x92/0x570 [ 2829.761120] __alloc_skb+0xb1/0x5b0 [ 2829.761930] alloc_skb_with_frags+0x92/0x570 [ 2829.762904] sock_alloc_send_pskb+0x7af/0x930 [ 2829.763908] ? sk_alloc+0x350/0x350 [ 2829.764714] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 00:57:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000031200215f0000000070e600000a"], 0x24}}, 0x0) [ 2829.765866] ? lock_chain_count+0x20/0x20 [ 2829.766886] ? lock_chain_count+0x20/0x20 [ 2829.767824] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2829.768932] ? ip_frag_init+0x350/0x350 [ 2829.769821] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2829.770884] ? ip6_mtu+0x1e9/0x3d0 [ 2829.771681] ? ip6_setup_cork+0xfb7/0x1740 [ 2829.772617] ip6_make_skb+0x2df/0x4e0 [ 2829.773456] ? ip_frag_init+0x350/0x350 [ 2829.774341] ? ip_frag_init+0x350/0x350 [ 2829.775233] ? ip6_push_pending_frames+0xf0/0xf0 [ 2829.776289] ? ip6_dst_hoplimit+0x199/0x440 [ 2829.777238] ? lock_downgrade+0x6d0/0x6d0 [ 2829.778168] udpv6_sendmsg+0x2128/0x2b40 [ 2829.779078] ? ip_frag_init+0x350/0x350 00:57:46 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:57:46 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4307, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0xbfb}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="5a50d6ec8d2f61acf0349fb6c0aa1db5594a198920734bbec9aa509a828f3f016abe95db216bb620bda3bb", 0x2b}], 0x1}}], 0x1, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x8, @private2}, 0x1c) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0)={0x0, 0x49a4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2829.779965] ? udp_v6_push_pending_frames+0x360/0x360 [ 2829.781237] ? trace_hardirqs_on+0x5b/0x180 [ 2829.782192] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2829.783405] ? lock_acquire+0x197/0x470 [ 2829.784280] ? find_held_lock+0x2c/0x110 [ 2829.785185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.786340] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2829.787542] ? sock_has_perm+0x1ea/0x280 [ 2829.788459] ? __import_iovec+0x458/0x590 [ 2829.789374] ? udp_v6_push_pending_frames+0x360/0x360 [ 2829.790515] inet6_sendmsg+0x105/0x140 [ 2829.791386] ? inet6_compat_ioctl+0x320/0x320 [ 2829.792375] __sock_sendmsg+0xf2/0x190 [ 2829.793235] ____sys_sendmsg+0x334/0x870 [ 2829.794134] ? sock_write_iter+0x3d0/0x3d0 [ 2829.795069] ? do_recvmmsg+0x6d0/0x6d0 [ 2829.795927] ? __lock_acquire+0x1657/0x5b00 [ 2829.796885] ___sys_sendmsg+0xf3/0x170 [ 2829.797743] ? sendmsg_copy_msghdr+0x160/0x160 [ 2829.798752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.799911] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2829.800893] ? trace_hardirqs_on+0x5b/0x180 [ 2829.801850] ? lock_acquire+0x197/0x470 [ 2829.802727] ? find_held_lock+0x2c/0x110 [ 2829.803644] ? __might_fault+0xd3/0x180 [ 2829.804519] ? lock_downgrade+0x6d0/0x6d0 [ 2829.805432] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2829.806643] __sys_sendmmsg+0x195/0x470 [ 2829.807538] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2829.808489] ? lock_downgrade+0x6d0/0x6d0 [ 2829.809416] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2829.810481] ? wait_for_completion_io+0x270/0x270 [ 2829.811557] ? rcu_read_lock_any_held+0x75/0xa0 [ 2829.812581] ? vfs_write+0x354/0xb10 [ 2829.813406] ? fput_many+0x2f/0x1a0 [ 2829.814204] ? ksys_write+0x1a9/0x260 [ 2829.815053] ? __ia32_sys_read+0xb0/0xb0 [ 2829.815952] __x64_sys_sendmmsg+0x99/0x100 [ 2829.816886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.818021] do_syscall_64+0x33/0x40 [ 2829.818844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.819982] RIP: 0033:0x7fb085b27b19 [ 2829.820802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:57:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) [ 2829.824881] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2829.826740] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2829.828326] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2829.829903] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.831483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.833064] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:57:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000600000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:57:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:57:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400ae031200215f0000000070e600000a"], 0x24}}, 0x0) 00:57:46 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2829.951584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15751 comm=syz-executor.2 00:57:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) 00:58:02 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x10}}) 00:58:02 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 71) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:58:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000051200215f0000000070e600000a"], 0x24}}, 0x0) 00:58:02 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x4080, 0x15f) 00:58:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000700000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:02 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:58:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) 00:58:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2846.043445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15776 comm=syz-executor.2 [ 2846.063301] loop1: detected capacity change from 0 to 1536 [ 2846.070188] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2846.075479] FAULT_INJECTION: forcing a failure. [ 2846.075479] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.078058] CPU: 1 PID: 15768 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2846.079546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2846.081324] Call Trace: [ 2846.081898] dump_stack+0x107/0x167 [ 2846.082685] should_fail.cold+0x5/0xa [ 2846.083509] should_failslab+0x5/0x20 [ 2846.084325] __kmalloc_node_track_caller+0x74/0x3b0 [ 2846.085388] ? alloc_skb_with_frags+0x92/0x570 [ 2846.086365] __alloc_skb+0xb1/0x5b0 [ 2846.087162] alloc_skb_with_frags+0x92/0x570 [ 2846.088117] sock_alloc_send_pskb+0x7af/0x930 [ 2846.089096] ? sk_alloc+0x350/0x350 [ 2846.089886] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2846.091005] ? lock_chain_count+0x20/0x20 [ 2846.091899] ? lock_chain_count+0x20/0x20 [ 2846.092791] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2846.093863] ? ip_frag_init+0x350/0x350 [ 2846.094718] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2846.095768] ? ip6_mtu+0x1e9/0x3d0 [ 2846.095788] ? ip6_setup_cork+0xfb7/0x1740 [ 2846.095809] ip6_make_skb+0x2df/0x4e0 [ 2846.095826] ? ip_frag_init+0x350/0x350 00:58:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) 00:58:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000c00700000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000061200215f0000000070e600000a"], 0x24}}, 0x0) [ 2846.095850] ? ip_frag_init+0x350/0x350 [ 2846.095871] ? ip6_push_pending_frames+0xf0/0xf0 [ 2846.095892] ? ip6_dst_hoplimit+0x199/0x440 00:58:03 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2846.095911] ? lock_downgrade+0x6d0/0x6d0 [ 2846.095945] udpv6_sendmsg+0x2128/0x2b40 [ 2846.095970] ? ip_frag_init+0x350/0x350 00:58:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000b00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2846.095998] ? udp_v6_push_pending_frames+0x360/0x360 [ 2846.096023] ? perf_event_task_disable+0x390/0x390 [ 2846.096047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2846.096070] ? lock_acquire+0x197/0x470 [ 2846.096087] ? find_held_lock+0x2c/0x110 [ 2846.096118] ? sock_has_perm+0x1ea/0x280 [ 2846.096157] ? __import_iovec+0x458/0x590 [ 2846.096178] ? udp_v6_push_pending_frames+0x360/0x360 [ 2846.096197] inet6_sendmsg+0x105/0x140 [ 2846.096214] ? inet6_compat_ioctl+0x320/0x320 00:58:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0) [ 2846.096232] __sock_sendmsg+0xf2/0x190 [ 2846.096253] ____sys_sendmsg+0x334/0x870 [ 2846.096275] ? sock_write_iter+0x3d0/0x3d0 [ 2846.096288] ? do_recvmmsg+0x6d0/0x6d0 [ 2846.096310] ? __lock_acquire+0x1657/0x5b00 [ 2846.096337] ___sys_sendmsg+0xf3/0x170 [ 2846.096355] ? sendmsg_copy_msghdr+0x160/0x160 [ 2846.096376] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2846.096393] ? _raw_spin_unlock_irq+0x27/0x30 [ 2846.096418] ? lock_acquire+0x197/0x470 [ 2846.096435] ? find_held_lock+0x2c/0x110 [ 2846.096458] ? __might_fault+0xd3/0x180 [ 2846.096477] ? lock_downgrade+0x6d0/0x6d0 [ 2846.096510] __sys_sendmmsg+0x195/0x470 [ 2846.096531] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2846.096550] ? lock_downgrade+0x6d0/0x6d0 [ 2846.096582] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2846.096602] ? wait_for_completion_io+0x270/0x270 [ 2846.096624] ? rcu_read_lock_any_held+0x75/0xa0 [ 2846.096641] ? vfs_write+0x354/0xb10 [ 2846.096660] ? fput_many+0x2f/0x1a0 [ 2846.096676] ? ksys_write+0x1a9/0x260 [ 2846.096695] ? __ia32_sys_read+0xb0/0xb0 [ 2846.096718] __x64_sys_sendmmsg+0x99/0x100 [ 2846.096738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2846.096755] do_syscall_64+0x33/0x40 [ 2846.096775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 00:58:03 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 72) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2846.096787] RIP: 0033:0x7fb085b27b19 00:58:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000071200215f0000000070e600000a"], 0x24}}, 0x0) [ 2846.096805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.096815] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2846.096835] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2846.096846] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2846.096856] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2846.096867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2846.096878] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2846.169512] loop1: detected capacity change from 0 to 1536 [ 2846.177286] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2846.400302] FAULT_INJECTION: forcing a failure. [ 2846.400302] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.400330] CPU: 1 PID: 15803 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2846.400340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2846.400346] Call Trace: [ 2846.400371] dump_stack+0x107/0x167 [ 2846.400392] should_fail.cold+0x5/0xa [ 2846.400420] ? create_object.isra.0+0x3a/0xa30 [ 2846.400437] should_failslab+0x5/0x20 [ 2846.400455] kmem_cache_alloc+0x5b/0x310 [ 2846.400478] create_object.isra.0+0x3a/0xa30 [ 2846.400494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2846.400518] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2846.400537] ? alloc_skb_with_frags+0x92/0x570 [ 2846.400562] __alloc_skb+0xb1/0x5b0 [ 2846.400586] alloc_skb_with_frags+0x92/0x570 [ 2846.400614] sock_alloc_send_pskb+0x7af/0x930 [ 2846.400644] ? sk_alloc+0x350/0x350 [ 2846.400669] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2846.400689] ? lock_chain_count+0x20/0x20 [ 2846.400709] ? lock_chain_count+0x20/0x20 [ 2846.400732] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2846.400765] ? ip_frag_init+0x350/0x350 [ 2846.400794] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2846.400811] ? ip6_mtu+0x1e9/0x3d0 [ 2846.400828] ? ip6_setup_cork+0xfb7/0x1740 [ 2846.400849] ip6_make_skb+0x2df/0x4e0 [ 2846.400866] ? ip_frag_init+0x350/0x350 [ 2846.400889] ? ip_frag_init+0x350/0x350 [ 2846.400910] ? ip6_push_pending_frames+0xf0/0xf0 [ 2846.400932] ? ip6_dst_hoplimit+0x199/0x440 [ 2846.400950] ? lock_downgrade+0x6d0/0x6d0 [ 2846.400984] udpv6_sendmsg+0x2128/0x2b40 [ 2846.401008] ? ip_frag_init+0x350/0x350 [ 2846.401037] ? udp_v6_push_pending_frames+0x360/0x360 [ 2846.401062] ? perf_event_task_disable+0x390/0x390 [ 2846.401084] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2846.401108] ? lock_acquire+0x197/0x470 [ 2846.401125] ? find_held_lock+0x2c/0x110 [ 2846.401155] ? sock_has_perm+0x1ea/0x280 [ 2846.401195] ? __import_iovec+0x458/0x590 [ 2846.401215] ? udp_v6_push_pending_frames+0x360/0x360 [ 2846.401235] inet6_sendmsg+0x105/0x140 [ 2846.401252] ? inet6_compat_ioctl+0x320/0x320 [ 2846.401270] __sock_sendmsg+0xf2/0x190 [ 2846.401290] ____sys_sendmsg+0x334/0x870 [ 2846.401313] ? sock_write_iter+0x3d0/0x3d0 [ 2846.401326] ? do_recvmmsg+0x6d0/0x6d0 [ 2846.401347] ? __lock_acquire+0x1657/0x5b00 [ 2846.401374] ___sys_sendmsg+0xf3/0x170 [ 2846.401392] ? sendmsg_copy_msghdr+0x160/0x160 [ 2846.401413] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2846.401431] ? _raw_spin_unlock_irq+0x27/0x30 [ 2846.401456] ? lock_acquire+0x197/0x470 [ 2846.401473] ? find_held_lock+0x2c/0x110 [ 2846.401499] ? __might_fault+0xd3/0x180 [ 2846.401524] ? lock_downgrade+0x6d0/0x6d0 [ 2846.401570] __sys_sendmmsg+0x195/0x470 [ 2846.401601] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2846.401620] ? lock_downgrade+0x6d0/0x6d0 [ 2846.401652] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2846.401673] ? wait_for_completion_io+0x270/0x270 [ 2846.401694] ? rcu_read_lock_any_held+0x75/0xa0 [ 2846.401710] ? vfs_write+0x354/0xb10 [ 2846.401729] ? fput_many+0x2f/0x1a0 [ 2846.401744] ? ksys_write+0x1a9/0x260 [ 2846.401764] ? __ia32_sys_read+0xb0/0xb0 [ 2846.401786] __x64_sys_sendmmsg+0x99/0x100 [ 2846.401806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2846.401823] do_syscall_64+0x33/0x40 [ 2846.401842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2846.401855] RIP: 0033:0x7fb085b27b19 [ 2846.401873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.401883] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2846.401904] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2846.401915] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2846.401926] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2846.401936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2846.401947] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:58:19 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:58:19 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 73) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:58:19 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) write$rfkill(r6, &(0x7f0000000180)={0x6}, 0x8) r7 = fcntl$dupfd(r5, 0x0, r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00']) 00:58:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:58:19 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0xfffffed5, &(0x7f00000004c0)=[{&(0x7f0000000340)="48395e50119c67295b2cd1c42613bf5ae40940a854127b7134649d2f4ce2fb5b22f5a4950a741bdf4720982648ca22eecfe319cd400f48988b6fbc4b610f5309b459251588447acdb04667156640eebe042fed5c1c42afa915d7a3c5a389297ddc50df0564d7de6271145f06b49d1d95c29d88e537a835cf84ab2e7afd2b35721457f3d3c8cac05044d1e3003cafa8e3e0ae87223c440e8543809cac40961638c9abc65954e6ba8155408a2c15b231436da53324e6f677f55a0ff9fb9a9e60993521ab2cf34588167e9a141bc3355a068e8b13", 0x1}], 0x1}}], 0x1, 0x4) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x3) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:58:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000001800000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0) 00:58:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000091200215f0000000070e600000a"], 0x24}}, 0x0) [ 2862.387885] loop1: detected capacity change from 0 to 1536 [ 2862.395602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15828 comm=syz-executor.2 [ 2862.406390] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2862.415907] FAULT_INJECTION: forcing a failure. [ 2862.415907] name failslab, interval 1, probability 0, space 0, times 0 [ 2862.417273] CPU: 0 PID: 15831 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2862.418099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2862.419090] Call Trace: [ 2862.419423] dump_stack+0x107/0x167 [ 2862.419862] should_fail.cold+0x5/0xa [ 2862.420328] should_failslab+0x5/0x20 [ 2862.420790] __kmalloc_node_track_caller+0x74/0x3b0 [ 2862.421387] ? alloc_skb_with_frags+0x92/0x570 [ 2862.421935] ? fib6_table_lookup+0x636/0xaf0 [ 2862.422467] __alloc_skb+0xb1/0x5b0 [ 2862.422912] alloc_skb_with_frags+0x92/0x570 [ 2862.423452] ? mark_lock+0xf5/0x2df0 [ 2862.423899] ? mark_lock+0xf5/0x2df0 [ 2862.424350] sock_alloc_send_pskb+0x7af/0x930 [ 2862.424895] ? sk_alloc+0x350/0x350 [ 2862.425332] ? find_held_lock+0x2c/0x110 [ 2862.425823] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2862.426458] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2862.427066] ? rawv6_exit+0x20/0x20 [ 2862.427520] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2862.428100] ? ip6_mtu+0x1e9/0x3d0 [ 2862.428539] ? ip6_setup_cork+0xfb7/0x1740 [ 2862.428553] ip6_append_data+0x1e6/0x330 [ 2862.428562] ? rawv6_exit+0x20/0x20 [ 2862.428574] ? rawv6_exit+0x20/0x20 [ 2862.428588] icmp6_send+0x1250/0x1f30 [ 2862.428614] ? icmpv6_push_pending_frames+0x470/0x470 [ 2862.428625] ? find_held_lock+0x2c/0x110 [ 2862.428656] ? ip6_dst_hoplimit+0x440/0x440 [ 2862.428672] ip6_pkt_drop+0x3d2/0x7f0 [ 2862.428684] ? ip6_pkt_discard+0x20/0x20 [ 2862.428695] ip6_local_out+0x29f/0x4c0 [ 2862.428708] ip6_send_skb+0x117/0x460 [ 2862.428723] udp_v6_send_skb+0x7b7/0x1620 [ 2862.428743] udpv6_sendmsg+0x216b/0x2b40 [ 2862.428756] ? ip_frag_init+0x350/0x350 [ 2862.428774] ? udp_v6_push_pending_frames+0x360/0x360 [ 2862.428791] ? perf_event_task_disable+0x390/0x390 [ 2862.428805] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2862.428820] ? lock_acquire+0x197/0x470 [ 2862.428831] ? find_held_lock+0x2c/0x110 [ 2862.428851] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2862.428863] ? sock_has_perm+0x1ea/0x280 [ 2862.428890] ? __import_iovec+0x458/0x590 [ 2862.428902] ? udp_v6_push_pending_frames+0x360/0x360 [ 2862.428914] inet6_sendmsg+0x105/0x140 [ 2862.428925] ? inet6_compat_ioctl+0x320/0x320 [ 2862.428936] __sock_sendmsg+0xf2/0x190 [ 2862.428949] ____sys_sendmsg+0x334/0x870 [ 2862.428963] ? sock_write_iter+0x3d0/0x3d0 [ 2862.428971] ? do_recvmmsg+0x6d0/0x6d0 [ 2862.428984] ? __lock_acquire+0x1657/0x5b00 [ 2862.429002] ___sys_sendmsg+0xf3/0x170 [ 2862.429013] ? sendmsg_copy_msghdr+0x160/0x160 [ 2862.429026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2862.429036] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2862.429046] ? trace_hardirqs_on+0x5b/0x180 [ 2862.429062] ? lock_acquire+0x197/0x470 [ 2862.429072] ? find_held_lock+0x2c/0x110 [ 2862.429087] ? __might_fault+0xd3/0x180 [ 2862.429098] ? lock_downgrade+0x6d0/0x6d0 [ 2862.429120] __sys_sendmmsg+0x195/0x470 [ 2862.429133] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2862.429145] ? lock_downgrade+0x6d0/0x6d0 [ 2862.429166] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2862.429178] ? wait_for_completion_io+0x270/0x270 [ 2862.429193] ? rcu_read_lock_any_held+0x75/0xa0 [ 2862.429204] ? vfs_write+0x354/0xb10 [ 2862.429216] ? fput_many+0x2f/0x1a0 [ 2862.429226] ? ksys_write+0x1a9/0x260 [ 2862.429239] ? __ia32_sys_read+0xb0/0xb0 [ 2862.429253] __x64_sys_sendmmsg+0x99/0x100 [ 2862.429266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2862.429277] do_syscall_64+0x33/0x40 [ 2862.429288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2862.429305] RIP: 0033:0x7fb085b27b19 [ 2862.456790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2862.458905] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2862.459818] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2862.460658] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2862.461504] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2862.462347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2862.463188] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:58:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000001c00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0) 00:58:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:58:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400c00e1200215f0000000070e600000a"], 0x24}}, 0x0) 00:58:19 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2862.533362] loop1: detected capacity change from 0 to 1536 [ 2862.537770] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:58:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f00"], 0x24}}, 0x0) 00:58:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000f1200215f0000000070e600000a"], 0x24}}, 0x0) [ 2862.570427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15853 comm=syz-executor.2 00:58:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000002000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:19 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2862.745877] loop1: detected capacity change from 0 to 1536 [ 2862.758350] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:58:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f00"], 0x24}}, 0x0) 00:58:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000401200215f0000000070e600000a"], 0x24}}, 0x0) 00:58:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:58:33 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2876.556242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15877 comm=syz-executor.2 [ 2876.600103] loop1: detected capacity change from 0 to 1536 00:58:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000003f00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:33 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) dup3(r2, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = dup3(r0, r1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) 00:58:33 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480)={0x0, 0xd3c2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:58:33 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 74) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2876.615227] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:58:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f00"], 0x24}}, 0x0) 00:58:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000481200215f0000000070e600000a"], 0x24}}, 0x0) [ 2876.683404] FAULT_INJECTION: forcing a failure. [ 2876.683404] name failslab, interval 1, probability 0, space 0, times 0 [ 2876.686291] CPU: 0 PID: 15888 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2876.688061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2876.690168] Call Trace: [ 2876.690849] dump_stack+0x107/0x167 [ 2876.691801] should_fail.cold+0x5/0xa [ 2876.692752] ? create_object.isra.0+0x3a/0xa30 [ 2876.693796] should_failslab+0x5/0x20 [ 2876.694745] kmem_cache_alloc+0x5b/0x310 [ 2876.695619] create_object.isra.0+0x3a/0xa30 [ 2876.696736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2876.697896] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2876.699180] ? alloc_skb_with_frags+0x92/0x570 [ 2876.700153] ? fib6_table_lookup+0x636/0xaf0 [ 2876.701288] __alloc_skb+0xb1/0x5b0 [ 2876.702235] alloc_skb_with_frags+0x92/0x570 [ 2876.703363] ? mark_lock+0xf5/0x2df0 [ 2876.704216] ? mark_lock+0xf5/0x2df0 [ 2876.705166] sock_alloc_send_pskb+0x7af/0x930 [ 2876.706324] ? sk_alloc+0x350/0x350 [ 2876.707252] ? find_held_lock+0x2c/0x110 [ 2876.708309] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 00:58:33 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2876.709666] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2876.711098] ? rawv6_exit+0x20/0x20 [ 2876.711900] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2876.713129] ? ip6_mtu+0x1e9/0x3d0 [ 2876.713944] ? ip6_setup_cork+0xfb7/0x1740 [ 2876.715029] ip6_append_data+0x1e6/0x330 [ 2876.715902] ? rawv6_exit+0x20/0x20 [ 2876.716828] ? rawv6_exit+0x20/0x20 [ 2876.717660] icmp6_send+0x1250/0x1f30 [ 2876.718658] ? icmpv6_push_pending_frames+0x470/0x470 [ 2876.719737] ? find_held_lock+0x2c/0x110 [ 2876.720798] ? ip6_dst_hoplimit+0x440/0x440 [ 2876.721786] ip6_pkt_drop+0x3d2/0x7f0 [ 2876.722752] ? ip6_pkt_discard+0x20/0x20 [ 2876.723613] ip6_local_out+0x29f/0x4c0 [ 2876.724611] ip6_send_skb+0x117/0x460 [ 2876.725493] udp_v6_send_skb+0x7b7/0x1620 [ 2876.726571] udpv6_sendmsg+0x216b/0x2b40 [ 2876.727420] ? ip_frag_init+0x350/0x350 [ 2876.728268] ? udp_v6_push_pending_frames+0x360/0x360 [ 2876.729573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2876.730777] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2876.732183] ? lock_acquire+0x197/0x470 [ 2876.733080] ? find_held_lock+0x2c/0x110 [ 2876.734122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2876.735218] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2876.736355] ? sock_has_perm+0x1ea/0x280 [ 2876.737223] ? __import_iovec+0x458/0x590 [ 2876.738077] ? udp_v6_push_pending_frames+0x360/0x360 [ 2876.739150] inet6_sendmsg+0x105/0x140 [ 2876.739979] ? inet6_compat_ioctl+0x320/0x320 [ 2876.740904] __sock_sendmsg+0xf2/0x190 [ 2876.741716] ____sys_sendmsg+0x334/0x870 [ 2876.742564] ? sock_write_iter+0x3d0/0x3d0 [ 2876.743444] ? do_recvmmsg+0x6d0/0x6d0 [ 2876.744458] ? __lock_acquire+0x1657/0x5b00 [ 2876.745441] ___sys_sendmsg+0xf3/0x170 [ 2876.746445] ? sendmsg_copy_msghdr+0x160/0x160 [ 2876.747392] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2876.748536] ? _raw_spin_unlock_irq+0x27/0x30 [ 2876.749522] ? lock_acquire+0x197/0x470 [ 2876.750529] ? find_held_lock+0x2c/0x110 [ 2876.751372] ? __might_fault+0xd3/0x180 [ 2876.752386] ? lock_downgrade+0x6d0/0x6d0 [ 2876.753347] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2876.754751] __sys_sendmmsg+0x195/0x470 [ 2876.755616] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2876.756719] ? lock_downgrade+0x6d0/0x6d0 [ 2876.757655] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2876.758883] ? wait_for_completion_io+0x270/0x270 [ 2876.759927] ? rcu_read_lock_any_held+0x75/0xa0 [ 2876.761123] ? vfs_write+0x354/0xb10 [ 2876.761963] ? fput_many+0x2f/0x1a0 [ 2876.762883] ? ksys_write+0x1a9/0x260 [ 2876.763741] ? __ia32_sys_read+0xb0/0xb0 [ 2876.764588] __x64_sys_sendmmsg+0x99/0x100 [ 2876.765458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2876.766515] do_syscall_64+0x33/0x40 [ 2876.767289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2876.768368] RIP: 0033:0x7fb085b27b19 [ 2876.769134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2876.772942] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2876.774519] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2876.776045] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2876.777507] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2876.778961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2876.780451] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:58:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:58:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000006300000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400004c1200215f0000000070e600000a"], 0x24}}, 0x0) [ 2876.895446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15905 comm=syz-executor.2 00:58:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070"], 0x24}}, 0x0) [ 2876.903472] loop1: detected capacity change from 0 to 1536 [ 2876.941755] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:58:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000681200215f0000000070e600000a"], 0x24}}, 0x0) 00:58:50 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 75) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:58:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000048000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:50 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) dup3(r1, r2, 0x0) dup(r2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup3(r0, r3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYBLOB="2c5166de31c447", @ANYRESHEX=r4, @ANYRES64]) 00:58:50 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x2040, 0x40) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:58:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070"], 0x24}}, 0x0) 00:58:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:58:50 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2893.367992] loop1: detected capacity change from 0 to 1536 [ 2893.374792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15933 comm=syz-executor.2 [ 2893.381014] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:58:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000088000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2893.459312] loop1: detected capacity change from 0 to 1536 [ 2893.469996] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2893.484143] FAULT_INJECTION: forcing a failure. [ 2893.484143] name failslab, interval 1, probability 0, space 0, times 0 [ 2893.486843] CPU: 0 PID: 15938 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2893.488487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2893.490415] Call Trace: [ 2893.491045] dump_stack+0x107/0x167 [ 2893.491911] should_fail.cold+0x5/0xa [ 2893.492802] should_failslab+0x5/0x20 [ 2893.493695] __kmalloc_node_track_caller+0x74/0x3b0 [ 2893.494861] ? alloc_skb_with_frags+0x92/0x570 [ 2893.495941] ? fib6_table_lookup+0x636/0xaf0 [ 2893.496976] __alloc_skb+0xb1/0x5b0 [ 2893.497836] alloc_skb_with_frags+0x92/0x570 [ 2893.498867] ? mark_lock+0xf5/0x2df0 [ 2893.499746] ? mark_lock+0xf5/0x2df0 [ 2893.500623] sock_alloc_send_pskb+0x7af/0x930 [ 2893.501694] ? sk_alloc+0x350/0x350 [ 2893.502544] ? find_held_lock+0x2c/0x110 [ 2893.503501] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2893.504751] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2893.505927] ? rawv6_exit+0x20/0x20 [ 2893.506783] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2893.507903] ? ip6_mtu+0x1e9/0x3d0 [ 2893.508727] ? ip6_setup_cork+0xfb7/0x1740 [ 2893.509715] ip6_append_data+0x1e6/0x330 [ 2893.510651] ? rawv6_exit+0x20/0x20 [ 2893.511496] ? rawv6_exit+0x20/0x20 [ 2893.512359] icmp6_send+0x1250/0x1f30 [ 2893.513262] ? icmpv6_push_pending_frames+0x470/0x470 [ 2893.514453] ? find_held_lock+0x2c/0x110 [ 2893.515428] ? ip6_dst_hoplimit+0x440/0x440 [ 2893.516440] ip6_pkt_drop+0x3d2/0x7f0 [ 2893.517320] ? ip6_pkt_discard+0x20/0x20 [ 2893.518254] ip6_local_out+0x29f/0x4c0 [ 2893.519151] ip6_send_skb+0x117/0x460 [ 2893.520043] udp_v6_send_skb+0x7b7/0x1620 [ 2893.521014] udpv6_sendmsg+0x216b/0x2b40 [ 2893.521952] ? ip_frag_init+0x350/0x350 [ 2893.522880] ? udp_v6_push_pending_frames+0x360/0x360 [ 2893.524083] ? perf_event_task_disable+0x390/0x390 [ 2893.525213] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2893.526329] ? lock_acquire+0x197/0x470 [ 2893.527241] ? find_held_lock+0x2c/0x110 [ 2893.528205] ? sock_has_perm+0x1ea/0x280 [ 2893.529167] ? __import_iovec+0x458/0x590 [ 2893.530126] ? udp_v6_push_pending_frames+0x360/0x360 [ 2893.531319] inet6_sendmsg+0x105/0x140 [ 2893.532208] ? inet6_compat_ioctl+0x320/0x320 [ 2893.533233] __sock_sendmsg+0xf2/0x190 [ 2893.534128] ____sys_sendmsg+0x334/0x870 [ 2893.535062] ? sock_write_iter+0x3d0/0x3d0 [ 2893.536027] ? do_recvmmsg+0x6d0/0x6d0 [ 2893.536917] ? __lock_acquire+0x1657/0x5b00 [ 2893.537908] ___sys_sendmsg+0xf3/0x170 [ 2893.538795] ? sendmsg_copy_msghdr+0x160/0x160 [ 2893.539846] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2893.540864] ? _raw_spin_unlock_irq+0x27/0x30 [ 2893.541892] ? lock_acquire+0x197/0x470 [ 2893.542796] ? find_held_lock+0x2c/0x110 [ 2893.543734] ? __might_fault+0xd3/0x180 [ 2893.544636] ? lock_downgrade+0x6d0/0x6d0 [ 2893.545597] __sys_sendmmsg+0x195/0x470 [ 2893.546505] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2893.547483] ? lock_downgrade+0x6d0/0x6d0 [ 2893.548458] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2893.549562] ? wait_for_completion_io+0x270/0x270 [ 2893.550663] ? rcu_read_lock_any_held+0x75/0xa0 [ 2893.551732] ? vfs_write+0x354/0xb10 [ 2893.552585] ? fput_many+0x2f/0x1a0 [ 2893.553411] ? ksys_write+0x1a9/0x260 [ 2893.554273] ? __ia32_sys_read+0xb0/0xb0 [ 2893.555192] __x64_sys_sendmmsg+0x99/0x100 [ 2893.556158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2893.557314] do_syscall_64+0x33/0x40 [ 2893.558156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2893.559305] RIP: 0033:0x7fb085b27b19 [ 2893.560150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2893.564285] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2893.566009] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2893.567609] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2893.569222] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2893.570821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2893.572431] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:58:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003000007c000000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400006c1200215f0000000070e600000a"], 0x24}}, 0x0) 00:58:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070"], 0x24}}, 0x0) 00:58:50 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='=fd,rfdno=\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 00:58:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:58:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000fdef00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:58:50 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a84, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x32e}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:58:50 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:58:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000741200215f0000000070e600000a"], 0x24}}, 0x0) [ 2893.805370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15963 comm=syz-executor.2 [ 2893.840220] loop1: detected capacity change from 0 to 1536 [ 2893.854375] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:59:03 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:59:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000effd00000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:59:03 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 76) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:59:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600"], 0x24}}, 0x0) 00:59:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400007a1200215f0000000070e600000a"], 0x24}}, 0x0) 00:59:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:59:03 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='4rans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766646eb67c", @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) 00:59:03 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x3, 0x80000, 0x7, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2906.512328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16003 comm=syz-executor.2 [ 2906.515663] loop1: detected capacity change from 0 to 1536 00:59:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240003ae1200215f0000000070e600000a"], 0x24}}, 0x0) [ 2906.578287] FAULT_INJECTION: forcing a failure. [ 2906.578287] name failslab, interval 1, probability 0, space 0, times 0 [ 2906.580884] CPU: 0 PID: 15998 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2906.582445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2906.584322] Call Trace: [ 2906.584930] dump_stack+0x107/0x167 [ 2906.585760] should_fail.cold+0x5/0xa [ 2906.586633] ? create_object.isra.0+0x3a/0xa30 [ 2906.587657] should_failslab+0x5/0x20 [ 2906.588534] kmem_cache_alloc+0x5b/0x310 [ 2906.589459] create_object.isra.0+0x3a/0xa30 [ 2906.590430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2906.591553] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2906.592709] ? alloc_skb_with_frags+0x92/0x570 [ 2906.593711] ? fib6_table_lookup+0x636/0xaf0 [ 2906.594709] __alloc_skb+0xb1/0x5b0 [ 2906.595522] alloc_skb_with_frags+0x92/0x570 [ 2906.596565] ? mark_lock+0xf5/0x2df0 [ 2906.597406] ? mark_lock+0xf5/0x2df0 [ 2906.598261] sock_alloc_send_pskb+0x7af/0x930 [ 2906.599287] ? sk_alloc+0x350/0x350 [ 2906.600125] ? find_held_lock+0x2c/0x110 [ 2906.601041] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2906.602246] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2906.603391] ? rawv6_exit+0x20/0x20 [ 2906.604231] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2906.605313] ? ip6_mtu+0x1e9/0x3d0 [ 2906.606118] ? ip6_setup_cork+0xfb7/0x1740 [ 2906.607078] ip6_append_data+0x1e6/0x330 [ 2906.608004] ? rawv6_exit+0x20/0x20 [ 2906.608823] ? rawv6_exit+0x20/0x20 [ 2906.609650] icmp6_send+0x1250/0x1f30 [ 2906.610532] ? icmpv6_push_pending_frames+0x470/0x470 [ 2906.611711] ? find_held_lock+0x2c/0x110 [ 2906.612681] ? ip6_dst_hoplimit+0x440/0x440 [ 2906.613661] ip6_pkt_drop+0x3d2/0x7f0 [ 2906.614518] ? ip6_pkt_discard+0x20/0x20 [ 2906.615431] ip6_local_out+0x29f/0x4c0 [ 2906.616325] ip6_send_skb+0x117/0x460 [ 2906.617189] udp_v6_send_skb+0x7b7/0x1620 [ 2906.618143] udpv6_sendmsg+0x216b/0x2b40 [ 2906.619062] ? ip_frag_init+0x350/0x350 [ 2906.619984] ? udp_v6_push_pending_frames+0x360/0x360 [ 2906.621135] ? perf_event_task_disable+0x390/0x390 [ 2906.622236] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2906.623295] ? lock_acquire+0x197/0x470 [ 2906.624194] ? find_held_lock+0x2c/0x110 [ 2906.625125] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2906.626295] ? sock_has_perm+0x1ea/0x280 [ 2906.627213] ? __import_iovec+0x458/0x590 [ 2906.628143] ? udp_v6_push_pending_frames+0x360/0x360 [ 2906.629274] inet6_sendmsg+0x105/0x140 [ 2906.630119] ? inet6_compat_ioctl+0x320/0x320 [ 2906.631104] __sock_sendmsg+0xf2/0x190 [ 2906.631959] ____sys_sendmsg+0x334/0x870 [ 2906.632848] ? sock_write_iter+0x3d0/0x3d0 [ 2906.633777] ? do_recvmmsg+0x6d0/0x6d0 [ 2906.634624] ? __lock_acquire+0x1657/0x5b00 [ 2906.635585] ___sys_sendmsg+0xf3/0x170 [ 2906.636452] ? sendmsg_copy_msghdr+0x160/0x160 [ 2906.637471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2906.638616] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2906.639607] ? trace_hardirqs_on+0x5b/0x180 [ 2906.640577] ? lock_acquire+0x197/0x470 [ 2906.641453] ? find_held_lock+0x2c/0x110 [ 2906.642348] ? __might_fault+0xd3/0x180 [ 2906.643223] ? lock_downgrade+0x6d0/0x6d0 [ 2906.644165] __sys_sendmmsg+0x195/0x470 [ 2906.645067] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2906.646025] ? lock_downgrade+0x6d0/0x6d0 [ 2906.646953] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2906.648012] ? wait_for_completion_io+0x270/0x270 [ 2906.649054] ? rcu_read_lock_any_held+0x75/0xa0 [ 2906.650068] ? vfs_write+0x354/0xb10 [ 2906.650881] ? fput_many+0x2f/0x1a0 [ 2906.651678] ? ksys_write+0x1a9/0x260 [ 2906.652506] ? __ia32_sys_read+0xb0/0xb0 [ 2906.653415] __x64_sys_sendmmsg+0x99/0x100 [ 2906.654337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2906.655459] do_syscall_64+0x33/0x40 [ 2906.656310] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2906.657420] RIP: 0033:0x7fb085b27b19 [ 2906.658228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2906.662253] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2906.663957] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2906.665508] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2906.667073] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2906.668686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2906.670261] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2906.683224] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:59:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600"], 0x24}}, 0x0) 00:59:03 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = fcntl$dupfd(r2, 0x0, r2) bind$802154_dgram(r3, &(0x7f0000000040), 0x5b) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) r4 = epoll_create1(0x80000) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000580)={[0x9]}, 0x8) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000005c0)='syz_tun\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000600)=""/197, 0xc5}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000480)=""/187, 0xbb}], 0x5, 0x7f, 0x5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r6 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x8000, 0x8000) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000540)='batadv_slave_0\x00') 00:59:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000008000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:59:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:59:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000ec01200215f0000000070e600000a"], 0x24}}, 0x0) [ 2906.856349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16029 comm=syz-executor.2 [ 2906.858881] loop1: detected capacity change from 0 to 1536 [ 2906.865330] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:59:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000020000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:59:03 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x440000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2907.005070] loop1: detected capacity change from 0 to 1536 [ 2907.018045] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:59:19 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:59:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:59:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000010001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:59:19 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) poll(&(0x7f0000000040)=[{r2, 0x20}, {r1, 0x2004}, {0xffffffffffffffff, 0x2040}], 0x3, 0x3ff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup3(r0, r3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) 00:59:19 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:59:20 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 77) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:59:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600"], 0x24}}, 0x0) 00:59:20 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000f01200215f0000000070e600000a"], 0x24}}, 0x0) [ 2923.086716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16050 comm=syz-executor.2 [ 2923.109780] loop1: detected capacity change from 0 to 1536 [ 2923.118944] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:59:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2923.154427] FAULT_INJECTION: forcing a failure. [ 2923.154427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2923.156518] CPU: 0 PID: 16058 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2923.157675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 00:59:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000020001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2923.159072] Call Trace: [ 2923.159583] dump_stack+0x107/0x167 [ 2923.160202] should_fail.cold+0x5/0xa [ 2923.160836] __alloc_pages_nodemask+0x182/0x600 [ 2923.161623] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2923.162636] ? kmem_cache_alloc_node+0x313/0x330 [ 2923.163436] alloc_pages_current+0x187/0x280 [ 2923.164187] allocate_slab+0x26f/0x380 [ 2923.164844] ___slab_alloc+0x470/0x700 [ 2923.165493] ? __alloc_skb+0x6d/0x5b0 [ 2923.166114] ? __is_insn_slot_addr+0x14c/0x290 [ 2923.166886] ? __alloc_skb+0x6d/0x5b0 [ 2923.167529] ? kmem_cache_alloc_node+0x313/0x330 [ 2923.168333] kmem_cache_alloc_node+0x313/0x330 [ 2923.169090] __alloc_skb+0x6d/0x5b0 [ 2923.169715] alloc_skb_with_frags+0x92/0x570 [ 2923.170461] sock_alloc_send_pskb+0x7af/0x930 [ 2923.171218] ? sk_alloc+0x350/0x350 [ 2923.171825] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2923.172717] ? lock_chain_count+0x20/0x20 [ 2923.173415] ? lock_chain_count+0x20/0x20 [ 2923.174116] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2923.174967] ? ip_frag_init+0x350/0x350 [ 2923.175643] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2923.176846] ? ip6_mtu+0x1e9/0x3d0 [ 2923.177730] ? ip6_setup_cork+0xfb7/0x1740 [ 2923.178769] ip6_make_skb+0x2df/0x4e0 [ 2923.179691] ? ip_frag_init+0x350/0x350 [ 2923.180682] ? ip_frag_init+0x350/0x350 [ 2923.181503] ? ip6_push_pending_frames+0xf0/0xf0 [ 2923.182486] ? ip6_dst_hoplimit+0x199/0x440 [ 2923.183394] ? lock_downgrade+0x6d0/0x6d0 [ 2923.184272] udpv6_sendmsg+0x2128/0x2b40 [ 2923.185116] ? ip_frag_init+0x350/0x350 [ 2923.185942] ? udp_v6_push_pending_frames+0x360/0x360 [ 2923.187006] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2923.188130] ? lock_acquire+0x197/0x470 [ 2923.188959] ? find_held_lock+0x2c/0x110 [ 2923.189809] ? sock_has_perm+0x1ea/0x280 [ 2923.190662] ? __import_iovec+0x458/0x590 [ 2923.191520] ? udp_v6_push_pending_frames+0x360/0x360 [ 2923.192594] inet6_sendmsg+0x105/0x140 [ 2923.193393] ? inet6_compat_ioctl+0x320/0x320 [ 2923.194326] __sock_sendmsg+0xf2/0x190 [ 2923.195136] ____sys_sendmsg+0x334/0x870 [ 2923.195977] ? sock_write_iter+0x3d0/0x3d0 [ 2923.196862] ? do_recvmmsg+0x6d0/0x6d0 [ 2923.197674] ? __lock_acquire+0x1657/0x5b00 [ 2923.198582] ___sys_sendmsg+0xf3/0x170 [ 2923.199401] ? sendmsg_copy_msghdr+0x160/0x160 [ 2923.200354] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2923.201291] ? _raw_spin_unlock_irq+0x27/0x30 [ 2923.202226] ? lock_acquire+0x197/0x470 [ 2923.203040] ? find_held_lock+0x2c/0x110 [ 2923.203903] ? __might_fault+0xd3/0x180 [ 2923.204741] ? lock_downgrade+0x6d0/0x6d0 [ 2923.205607] __sys_sendmmsg+0x195/0x470 [ 2923.206428] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2923.207324] ? lock_downgrade+0x6d0/0x6d0 [ 2923.208199] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2923.209192] ? wait_for_completion_io+0x270/0x270 [ 2923.210208] ? rcu_read_lock_any_held+0x75/0xa0 [ 2923.211156] ? vfs_write+0x354/0xb10 [ 2923.211927] ? fput_many+0x2f/0x1a0 [ 2923.212697] ? ksys_write+0x1a9/0x260 [ 2923.213502] ? __ia32_sys_read+0xb0/0xb0 [ 2923.214339] __x64_sys_sendmmsg+0x99/0x100 [ 2923.215219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2923.216288] do_syscall_64+0x33/0x40 [ 2923.217061] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2923.218111] RIP: 0033:0x7fb085b27b19 [ 2923.218881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2923.222719] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2923.224404] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2923.225903] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2923.227391] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2923.228877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2923.230338] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2923.254603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16070 comm=syz-executor.2 00:59:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e60000"], 0x24}}, 0x0) 00:59:20 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000ff1200215f0000000070e600000a"], 0x24}}, 0x0) 00:59:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000030001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:59:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e60000"], 0x24}}, 0x0) 00:59:20 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:59:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2923.407972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16086 comm=syz-executor.2 00:59:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000040001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:59:34 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002d4a5e1afd8e97780fa00e5927a7050000211e0000007c0794410b3362a1c277c0a07d69ebad9618abaf4d210e7504d1ac8bd43672ecd26e03162a2f597bd46a9c0d4d4c0994b23e0b511bd3d3446c59f3eb749dbbd52a77ee3792b20e7d407633db7f8b84c8a04123"], 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x0, 0x3, 0x1, 0x0, 0x5, 0xc, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x73, 0x4, @perf_config_ext={0x7, 0x7ff}, 0x2, 0x9, 0x8, 0x9, 0x2, 0x0, 0xef73, 0x0, 0x5, 0x0, 0x100001000}, 0x0, 0xd, r4, 0x2) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000009000000aad9faae6c83e4bcc2b6cbbaf3d9e87bcb72843d57059a8c97e5a60acfa71b934f588addce5ddcd267bab90ce50be4808b5218f0e5c2c1a638e108b7d08fff60c016a2540d72889204db9cac62186e7e3e66bfce579d24b413ea0976865b81da004a00653df33d2e71f5035491b8a92758bca6474ad66d2e73f0d42ec9ad5fbc71cec542ef8e7d699438c2de0be6a418007938d0c77edb280b1f01ae2026e56f5e5c074cec85f7791f04a1f50da7e355f0b6164fb09712e0c1eec11064a4d4bd0ec9ddace55c0f894ba376296dab268ec15bde62d57a2b57dd78ff48ade2521f098527105b913e5ff2c53ede8e1ae27fb78b70a35fda8334b4c1f6169d91e77108735de294428ea22722289cfb0262988b6c11b2a2aa2a75da129d9b0f03f38f8087c1c205f64d821170a922578be05c53d7e23ab271923893615da40ce333d4bef6", @ANYRES32=r8], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0xfc, 0x3d, 0x5, 0x4c, @private0, @empty, 0x8000, 0x20, 0x0, 0x7fff}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000680)=0x4) r11 = fcntl$dupfd(r10, 0x0, r10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r2}}) 00:59:34 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:59:34 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendmsg$unix(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000340)="c242e8c58f6f99b078793ffc013c104902b41bd002b1fa1bc06b1ddb8bd4205e96524d07612230b91536a0e289f442e6df640f95fe4e4ba6407c5fcc3b35365e9560aa5d5ced1a6eadbaa2fcd5f714894a221bb9dd08bf97de4ac6419b0c637289d5cd9c89f8f9fa666038652ffa15971cd568d55cd8c87cb5b827fe4517c5bc9034e3810f99868fb08209fe36974e84bc997e31b0b0b87805e50482105d9a5b1a897a676a297a4e95208d0a53f7930c01ea121bfc2a35dc8c360d9e0784c9bf997a633d8fdd28a0d5a36c866d8127b9b0aa2db60ea55f7669e05d8f833ea5f6c67d60e3fc78f02f9f04aa3b", 0xec}, {&(0x7f0000000500)="1370db7293391e757410659afc49f1fd80843bccdbec0e3819d9cf28d1d78213c05340d45337fe5179dd197acea8a6230dbef597b98b0baaa9da5e50475afca08ecdf9679b9f539362691dd91786eafb4447034074327e6bc27d36e69a962efcdea9fa56e4d56139a16721a65f7215dd046fc01f3e28e503b3d29564326e9a2b9bcdc44807adad4f19de971ab306a703972f44a9cea0c104", 0x98}, {&(0x7f0000000180)="7bcce7bc6be515b984cbc09935d9d7b52c5a4205ef811709e5fb1a621b6076159550a2118840b96c60d281f4204fb1b6040d9e8855a7a5e2be8d45d8c6922b042449b10b4da8131606d8713625265637ddd5f3708ddce554d5438bafaf5589b1f9d12cd419d48b", 0x67}, {&(0x7f00000000c0)="b934cf28983917e84f56b4c98ba91b99920efdde346b4c70b4f51e34d1bb60176420858327a793c25aecd30ca5e5f3d8d201", 0x32}, {&(0x7f0000000280)="d47acaa1262e0b46e2915d37f59ac594df0abab45a0a193cd371b5b1e40b5ee8ffe0", 0x22}, {&(0x7f0000000640)="d5305a5b5860477531ac204ba3452f701bbe2092bfe6546f11b21ba71da89b825ee0b98a9021ef2201c31eef70f0068ff9c1ee1bcba92add66654f7e79a4a8498ee3fb3ed9a71cec6745415834b6021e1b0045c016e0b8db08e29479b20152568e39a432c3c303d9fafaab", 0x6b}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="a85541e0fc538674c9b1372491d523a486f62845ce03862b2fdeccb14fb0c39672ac6e666bcb2eab913484eab692aa56c47ba041d14d4e97bdda5231b9330a5ff1dca9f7afd5d4b9b988ee34be02d8c9e7f22587318a7f6bf2b90bf6b99fb0bf7243fdf00f4c43950e666c6f4ff113790c81b43ee630cfffb82f2d5282e308f1d489e0c22763584a97b8affafb778736dbc52d9349823a1d4734a563d6a3be130ddf750ba92d3f18a5e43dc5050dc6d5fef5a871d6b55a7ddc09218a0415d19e5516b6d27dc0aaac174baa736ca342062aced555e0834d531d31fbc013724fdc61b2d3b3b2d7ba9f9ed89cb28c7244404401f72fcb1640fe", 0xf8}], 0x8, &(0x7f0000001ac0)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000080d0dba1806da7ef723e2b073974b28300140000000000000001000010010000001bbed9aea74fb47617596da8fa2f8a5994c583b485ce063b2b535c5ddf66aa8a5b097d7d37e4fcfca5", @ANYRES32, @ANYBLOB="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"], 0x120, 0x40}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b6, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x1000000, 0x256}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:59:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:59:34 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 78) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:59:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f00215f0000000070e600000a"], 0x24}}, 0x0) 00:59:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e60000"], 0x24}}, 0x0) [ 2937.677876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18989 sclass=netlink_route_socket pid=16099 comm=syz-executor.7 [ 2937.684714] FAULT_INJECTION: forcing a failure. [ 2937.684714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2937.686142] CPU: 1 PID: 16098 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2937.686945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.687695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=16103 comm=syz-executor.6 [ 2937.687908] Call Trace: [ 2937.687932] dump_stack+0x107/0x167 [ 2937.690100] should_fail.cold+0x5/0xa [ 2937.690545] __alloc_pages_nodemask+0x182/0x600 [ 2937.691088] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2937.691788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2937.692408] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2937.693041] alloc_pages_current+0x187/0x280 [ 2937.693554] ? allocate_slab+0x2ad/0x380 [ 2937.694030] allocate_slab+0x26f/0x380 [ 2937.694486] ___slab_alloc+0x470/0x700 [ 2937.694941] ? __alloc_skb+0x6d/0x5b0 [ 2937.695398] ? __is_insn_slot_addr+0x14c/0x290 [ 2937.695933] ? __alloc_skb+0x6d/0x5b0 [ 2937.696388] ? kmem_cache_alloc_node+0x313/0x330 [ 2937.696939] kmem_cache_alloc_node+0x313/0x330 [ 2937.697475] __alloc_skb+0x6d/0x5b0 [ 2937.697903] alloc_skb_with_frags+0x92/0x570 [ 2937.698421] sock_alloc_send_pskb+0x7af/0x930 [ 2937.698951] ? sk_alloc+0x350/0x350 [ 2937.698970] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2937.700010] ? lock_chain_count+0x20/0x20 [ 2937.700498] ? lock_chain_count+0x20/0x20 [ 2937.700984] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2937.701575] ? ip_frag_init+0x350/0x350 [ 2937.702045] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2937.702609] ? ip6_mtu+0x1e9/0x3d0 [ 2937.703023] ? ip6_setup_cork+0xfb7/0x1740 [ 2937.703410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=16110 comm=syz-executor.6 [ 2937.703525] ip6_make_skb+0x2df/0x4e0 [ 2937.705336] ? ip_frag_init+0x350/0x350 [ 2937.705813] ? ip_frag_init+0x350/0x350 [ 2937.706279] ? ip6_push_pending_frames+0xf0/0xf0 [ 2937.706830] ? ip6_dst_hoplimit+0x199/0x440 [ 2937.707336] ? lock_downgrade+0x6d0/0x6d0 [ 2937.707827] udpv6_sendmsg+0x2128/0x2b40 [ 2937.708313] ? ip_frag_init+0x350/0x350 [ 2937.708788] ? udp_v6_push_pending_frames+0x360/0x360 [ 2937.709405] ? perf_event_task_disable+0x390/0x390 [ 2937.709980] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2937.710550] ? lock_acquire+0x197/0x470 [ 2937.711013] ? find_held_lock+0x2c/0x110 [ 2937.711495] ? sock_has_perm+0x1ea/0x280 [ 2937.711980] ? __import_iovec+0x458/0x590 [ 2937.712473] ? udp_v6_push_pending_frames+0x360/0x360 [ 2937.713078] inet6_sendmsg+0x105/0x140 [ 2937.713533] ? inet6_compat_ioctl+0x320/0x320 [ 2937.714065] __sock_sendmsg+0xf2/0x190 [ 2937.714520] ____sys_sendmsg+0x334/0x870 [ 2937.714995] ? sock_write_iter+0x3d0/0x3d0 [ 2937.715482] ? do_recvmmsg+0x6d0/0x6d0 [ 2937.715939] ? find_held_lock+0x2c/0x110 [ 2937.716442] ___sys_sendmsg+0xf3/0x170 [ 2937.716902] ? sendmsg_copy_msghdr+0x160/0x160 [ 2937.717447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2937.718055] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2937.718576] ? trace_hardirqs_on+0x5b/0x180 [ 2937.719078] ? finish_task_switch+0x1a4/0x5d0 [ 2937.719604] ? __switch_to+0x572/0xf70 [ 2937.720062] ? __switch_to_asm+0x3a/0x60 [ 2937.720541] ? __switch_to_asm+0x34/0x60 [ 2937.721015] ? __schedule+0x82c/0x1ea0 [ 2937.721471] ? io_schedule_timeout+0x140/0x140 [ 2937.722006] __sys_sendmmsg+0x195/0x470 [ 2937.722472] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2937.722981] ? lock_downgrade+0x6d0/0x6d0 [ 2937.723476] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2937.724037] ? wait_for_completion_io+0x270/0x270 [ 2937.724606] ? rcu_read_lock_any_held+0x75/0xa0 [ 2937.725148] ? vfs_write+0x354/0xb10 [ 2937.725582] ? fput_many+0x2f/0x1a0 [ 2937.726016] ? ksys_write+0x1a9/0x260 [ 2937.726467] ? __ia32_sys_read+0xb0/0xb0 [ 2937.726946] __x64_sys_sendmmsg+0x99/0x100 [ 2937.727440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2937.728041] do_syscall_64+0x33/0x40 [ 2937.728489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2937.729086] RIP: 0033:0x7fb085b27b19 [ 2937.729523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.731666] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2937.732557] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2937.733390] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2937.734221] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2937.735073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2937.735913] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 00:59:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001100215f0000000070e600000a"], 0x24}}, 0x0) [ 2937.740439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16101 comm=syz-executor.2 [ 2937.751376] loop1: detected capacity change from 0 to 1536 [ 2937.756480] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:59:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:59:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000050001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2937.848898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16124 comm=syz-executor.2 00:59:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000021200215f0000000070e600000a"], 0x24}}, 0x0) 00:59:34 executing program 0: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:59:34 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 79) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:59:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000031200215f0000000070e600000a"], 0x24}}, 0x0) [ 2937.911293] loop1: detected capacity change from 0 to 1536 [ 2937.920801] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:59:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2937.958124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16141 comm=syz-executor.2 00:59:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000300)=""/41, 0x29}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000400)=""/42, 0x2a}], 0x5, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x1, 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0xfd, 0x0, 0x0, 0x6, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x40e0, &(0x7f0000000180)={0x0, 0xc014, 0x0, 0x3}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x1370, &(0x7f0000003480)={0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2937.993038] FAULT_INJECTION: forcing a failure. [ 2937.993038] name failslab, interval 1, probability 0, space 0, times 0 [ 2937.994440] CPU: 1 PID: 16139 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2937.995235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.996201] Call Trace: [ 2937.996525] dump_stack+0x107/0x167 [ 2937.996950] should_fail.cold+0x5/0xa [ 2937.997394] ? create_object.isra.0+0x3a/0xa30 [ 2937.997922] should_failslab+0x5/0x20 [ 2937.998364] kmem_cache_alloc+0x5b/0x310 [ 2937.998836] create_object.isra.0+0x3a/0xa30 [ 2937.999349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2937.999943] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2938.000542] ? alloc_skb_with_frags+0x92/0x570 [ 2938.001075] __alloc_skb+0xb1/0x5b0 [ 2938.001501] alloc_skb_with_frags+0x92/0x570 [ 2938.002013] sock_alloc_send_pskb+0x7af/0x930 [ 2938.002538] ? sk_alloc+0x350/0x350 [ 2938.002961] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2938.003568] ? lock_chain_count+0x20/0x20 [ 2938.004049] ? lock_chain_count+0x20/0x20 [ 2938.004542] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2938.005128] ? ip_frag_init+0x350/0x350 [ 2938.005595] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2938.006152] ? ip6_mtu+0x1e9/0x3d0 [ 2938.006561] ? ip6_setup_cork+0xfb7/0x1740 [ 2938.007054] ip6_make_skb+0x2df/0x4e0 [ 2938.007494] ? ip_frag_init+0x350/0x350 [ 2938.007956] ? ip_frag_init+0x350/0x350 [ 2938.008428] ? ip6_push_pending_frames+0xf0/0xf0 [ 2938.008975] ? ip6_dst_hoplimit+0x199/0x440 [ 2938.009474] ? lock_downgrade+0x6d0/0x6d0 [ 2938.009963] udpv6_sendmsg+0x2128/0x2b40 [ 2938.010436] ? ip_frag_init+0x350/0x350 [ 2938.010905] ? udp_v6_push_pending_frames+0x360/0x360 [ 2938.011508] ? perf_event_task_disable+0x390/0x390 [ 2938.012080] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2938.012653] ? lock_acquire+0x197/0x470 [ 2938.013115] ? find_held_lock+0x2c/0x110 [ 2938.013606] ? inet_send_prepare+0x1f/0x540 [ 2938.014109] ? inet_send_prepare+0x51/0x540 [ 2938.014612] ? udp_v6_push_pending_frames+0x360/0x360 [ 2938.015213] inet6_sendmsg+0x105/0x140 [ 2938.015664] ? inet6_compat_ioctl+0x320/0x320 [ 2938.016187] __sock_sendmsg+0xf2/0x190 [ 2938.016652] ____sys_sendmsg+0x334/0x870 [ 2938.017125] ? sock_write_iter+0x3d0/0x3d0 [ 2938.017615] ? do_recvmmsg+0x6d0/0x6d0 [ 2938.018071] ? find_held_lock+0x2c/0x110 [ 2938.018546] ___sys_sendmsg+0xf3/0x170 [ 2938.018996] ? sendmsg_copy_msghdr+0x160/0x160 [ 2938.019530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2938.020135] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2938.020668] ? trace_hardirqs_on+0x5b/0x180 [ 2938.021165] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2938.021688] ? finish_task_switch+0x126/0x5d0 [ 2938.022208] ? finish_task_switch+0xef/0x5d0 [ 2938.022718] ? __switch_to+0x572/0xf70 [ 2938.023167] ? __switch_to_asm+0x3a/0x60 [ 2938.023640] ? __switch_to_asm+0x34/0x60 [ 2938.024111] ? __schedule+0x82c/0x1ea0 [ 2938.024575] ? io_schedule_timeout+0x140/0x140 [ 2938.025107] __sys_sendmmsg+0x195/0x470 [ 2938.025567] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2938.026064] ? lock_downgrade+0x6d0/0x6d0 [ 2938.026553] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2938.027113] ? wait_for_completion_io+0x270/0x270 [ 2938.027676] ? rcu_read_lock_any_held+0x75/0xa0 [ 2938.028215] ? vfs_write+0x354/0xb10 [ 2938.028660] ? fput_many+0x2f/0x1a0 [ 2938.029082] ? ksys_write+0x1a9/0x260 [ 2938.029525] ? __ia32_sys_read+0xb0/0xb0 [ 2938.030001] __x64_sys_sendmmsg+0x99/0x100 [ 2938.030495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2938.031094] do_syscall_64+0x33/0x40 [ 2938.031528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2938.032125] RIP: 0033:0x7fb085b27b19 [ 2938.032569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2938.034707] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2938.035588] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2938.036421] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2938.037247] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2938.038070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2938.038898] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2938.513170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18989 sclass=netlink_route_socket pid=16099 comm=syz-executor.7 00:59:49 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x200003, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r2 = dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000100)=0x4) syz_io_uring_setup(0x3a88, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x3b0c, &(0x7f0000000280)={0x0, 0x8527, 0x2, 0x40000000, 0x91}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000380)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4a}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:59:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f800002000400003008cffffff000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:59:49 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 00:59:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:59:49 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 80) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:59:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000060001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:59:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000041200215f0000000070e600000a"], 0x24}}, 0x0) 00:59:49 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x1d, 0xc21}, 0x14}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x13a8, 0x2f, 0x1, 0x70bd29, 0x25dfdbff, {0xf}, [@nested={0x163, 0x2a, 0x0, 0x1, [@generic="c4d6fd7d1647d4925410b437f3db20bb383ce743655f011be4d39832b3ca47c045ee87a693bf316f23cb6661a2ffe33ce27eb40590c66dc40efbca5fc63cd47b09aa096659561cac298691e71ae1c92497774e54f64402d193816e053228320b2a883b38ff2a03defd6837ab96a9ae2ccc3539388640d358ffb59cb34669a0c671d3d6be23f30552c943a616cec6e9352ccf66ed7991ce81823dde550cce2048289c8e411aa5cdcfc5b8e5119ddab1d6e260c036928018dce1ac5ab34a27ae3e50ee82463154e4bedbbdb2a02f66aac000a95941a8479afc90bd6ee553ee8dbca640aca0d25c509dcaff2a17abf3b705cf69", @generic="d2ce73d4bba88171b1edddd7520109c0b34b18a54d7d73b57e2ba862914d7af01d8d6f45c20633149e296d67b6a474834f735da2a4e6ae80c3bf146f5b78485aa543721ec250d365f77267bdb39803894b27e1895a9241f9a60ab02743cad4bd92fa2b93902c31ebe253393854"]}, @typed={0xc, 0x73, 0x0, 0x0, @u64=0x9}, @nested={0x1133, 0x64, 0x0, 0x1, [@typed={0x4, 0x61}, @generic="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", @typed={0x8, 0x7a, 0x0, 0x0, @fd=r1}, @generic="5566cddcdaf4823b2831a552eb2fdefb262cb7a2a2c570bd84a25b9cc662e886345bad4d8ca7cf3126241731da24efadd334ff9421fde726f87f88026bc17586e66a0346d6da10ec0b3b9d6ad204655e26374f175717f16e23fa431eb93064962f07cf382668681d9bda2e1d2e952a1ec1205699b4fb40d5b69135f19be8ac9808ee4fde69d9ccf62a35b8e5f10c3a491415194f9b4f57558eaa171bfca7b1c20e40aa326c336480f4e9a9138f890be6b5d8572f34647ff03568dcb7", @generic="1be8c20b75b9144b1423a413d4e7a0fe98aa1221f3a14a51263e37209c0d75e94bc034d9173740be4caaaa3c8647f369f4e4eb03d26555cca222900e4a70090e313e7bfef7dedaf5efed82ff2bf8eb935470357ce49a1766a9b7c9", @typed={0xc, 0x83, 0x0, 0x0, @u64=0x7f}]}, @generic="857f2017c7feba67fce6015beb8f2c477df743d6a73c4be30685fe4024a0b32baefa0dab8b108a77da72bbfa1e404d32f112f1529a765724cc4e054e02df1c0e783db41b2e227efb36f7ced60ef207c6a4b72b57bd711602210f039441164001b038e8ec990b7e2c2c61e021eaf1c9e83a272d64812e7c1441109918e3bc3cb870da1fd9a2b29686ed1495f22ab6314d", @generic="e7628a36d3f47bc28f9dc1f288ece04e9cbf789b886448ab01a98ba6f2de2d8b947abea80fdf13d37b540b14a5695424c186f7", @nested={0x24, 0x74, 0x0, 0x1, [@typed={0x14, 0x24, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x4, 0x82}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x6c, 0x0, 0x0, @u32=0x4}]}, 0x13a8}, 0x1, 0x0, 0x0, 0x20004000}, 0x18) r6 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2952.981833] loop1: detected capacity change from 0 to 1536 [ 2952.988755] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2952.995179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16174 comm=syz-executor.2 [ 2953.001320] loop0: detected capacity change from 0 to 1536 [ 2953.009818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=16169 comm=syz-executor.7 [ 2953.024214] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:59:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000051200215f0000000070e600000a"], 0x24}}, 0x0) [ 2953.062090] FAULT_INJECTION: forcing a failure. [ 2953.062090] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.063762] CPU: 1 PID: 16176 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2953.064652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.065708] Call Trace: [ 2953.066050] dump_stack+0x107/0x167 [ 2953.066514] should_fail.cold+0x5/0xa [ 2953.066996] ? create_object.isra.0+0x3a/0xa30 [ 2953.067574] should_failslab+0x5/0x20 [ 2953.068055] kmem_cache_alloc+0x5b/0x310 [ 2953.068578] ? __is_insn_slot_addr+0x14c/0x290 [ 2953.069164] create_object.isra.0+0x3a/0xa30 [ 2953.069734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2953.070383] kmem_cache_alloc_node+0x169/0x330 [ 2953.070965] __alloc_skb+0x6d/0x5b0 [ 2953.071427] alloc_skb_with_frags+0x92/0x570 [ 2953.071989] sock_alloc_send_pskb+0x7af/0x930 [ 2953.072565] ? sk_alloc+0x350/0x350 [ 2953.073031] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.073690] ? lock_chain_count+0x20/0x20 [ 2953.074216] ? lock_chain_count+0x20/0x20 [ 2953.074743] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2953.075381] ? ip_frag_init+0x350/0x350 [ 2953.075885] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2953.076490] ? ip6_mtu+0x1e9/0x3d0 [ 2953.076941] ? ip6_setup_cork+0xfb7/0x1740 [ 2953.077471] ip6_make_skb+0x2df/0x4e0 [ 2953.077949] ? ip_frag_init+0x350/0x350 [ 2953.078450] ? ip_frag_init+0x350/0x350 [ 2953.078955] ? ip6_push_pending_frames+0xf0/0xf0 [ 2953.079554] ? ip6_dst_hoplimit+0x199/0x440 [ 2953.080098] ? lock_downgrade+0x6d0/0x6d0 [ 2953.080635] udpv6_sendmsg+0x2128/0x2b40 [ 2953.081147] ? ip_frag_init+0x350/0x350 [ 2953.081651] ? udp_v6_push_pending_frames+0x360/0x360 [ 2953.082300] ? perf_event_task_disable+0x390/0x390 [ 2953.082916] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2953.083522] ? lock_acquire+0x197/0x470 [ 2953.084024] ? find_held_lock+0x2c/0x110 [ 2953.084549] ? sock_has_perm+0x1ea/0x280 [ 2953.085094] ? __import_iovec+0x458/0x590 [ 2953.085615] ? udp_v6_push_pending_frames+0x360/0x360 [ 2953.086261] inet6_sendmsg+0x105/0x140 [ 2953.086746] ? inet6_compat_ioctl+0x320/0x320 [ 2953.087309] __sock_sendmsg+0xf2/0x190 [ 2953.087798] ____sys_sendmsg+0x334/0x870 [ 2953.088316] ? sock_write_iter+0x3d0/0x3d0 [ 2953.088850] ? do_recvmmsg+0x6d0/0x6d0 [ 2953.089338] ? __lock_acquire+0x1657/0x5b00 [ 2953.089885] ___sys_sendmsg+0xf3/0x170 [ 2953.090371] ? sendmsg_copy_msghdr+0x160/0x160 [ 2953.090951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2953.091605] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2953.092162] ? trace_hardirqs_on+0x5b/0x180 [ 2953.092713] ? lock_acquire+0x197/0x470 [ 2953.093210] ? find_held_lock+0x2c/0x110 [ 2953.093721] ? __might_fault+0xd3/0x180 [ 2953.094223] ? lock_downgrade+0x6d0/0x6d0 [ 2953.094747] __sys_sendmmsg+0x195/0x470 [ 2953.095243] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2953.095791] ? lock_downgrade+0x6d0/0x6d0 [ 2953.096315] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2953.096921] ? wait_for_completion_io+0x270/0x270 [ 2953.097523] ? rcu_read_lock_any_held+0x75/0xa0 [ 2953.098098] ? vfs_write+0x354/0xb10 [ 2953.098560] ? fput_many+0x2f/0x1a0 [ 2953.099009] ? ksys_write+0x1a9/0x260 [ 2953.099483] ? __ia32_sys_read+0xb0/0xb0 [ 2953.099993] __x64_sys_sendmmsg+0x99/0x100 [ 2953.100519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2953.101168] do_syscall_64+0x33/0x40 [ 2953.101631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2953.102270] RIP: 0033:0x7fb085b27b19 [ 2953.102735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.105026] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2953.105971] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2953.106855] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2953.107743] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.108635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2953.109519] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2953.149192] FAULT_INJECTION: forcing a failure. [ 2953.149192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2953.150706] CPU: 1 PID: 16184 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2953.151557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.152576] Call Trace: [ 2953.152906] dump_stack+0x107/0x167 [ 2953.153356] should_fail.cold+0x5/0xa [ 2953.153827] _copy_from_user+0x2e/0x1b0 [ 2953.154323] __copy_msghdr_from_user+0x91/0x4b0 [ 2953.154890] ? __ia32_sys_shutdown+0x80/0x80 [ 2953.155427] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.156064] ? __lock_acquire+0x1657/0x5b00 [ 2953.156605] ? __lock_acquire+0xbb1/0x5b00 [ 2953.157131] sendmsg_copy_msghdr+0xa1/0x160 [ 2953.157659] ? do_recvmmsg+0x6d0/0x6d0 [ 2953.158139] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.158778] ? lock_downgrade+0x6d0/0x6d0 [ 2953.159284] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.159922] ___sys_sendmsg+0xc6/0x170 [ 2953.160398] ? sendmsg_copy_msghdr+0x160/0x160 [ 2953.160969] ? __fget_files+0x2cf/0x520 [ 2953.161456] ? lock_downgrade+0x6d0/0x6d0 [ 2953.161964] ? find_held_lock+0x2c/0x110 [ 2953.162467] ? __fget_files+0x2f8/0x520 [ 2953.162964] ? __fget_light+0xea/0x290 [ 2953.163439] __sys_sendmsg+0xe5/0x1b0 [ 2953.163910] ? __sys_sendmsg_sock+0x40/0x40 [ 2953.164433] ? rcu_read_lock_any_held+0x75/0xa0 [ 2953.165023] ? fput_many+0x2f/0x1a0 [ 2953.165459] ? ksys_write+0x1a9/0x260 [ 2953.165920] ? __ia32_sys_read+0xb0/0xb0 [ 2953.166423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2953.167070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2953.167694] ? trace_hardirqs_on+0x5b/0x180 [ 2953.168216] do_syscall_64+0x33/0x40 [ 2953.168675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2953.169295] RIP: 0033:0x7fd129b8bb19 [ 2953.169746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.171984] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2953.172911] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 2953.173776] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2953.174671] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.175533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2953.176396] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 00:59:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000070001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 00:59:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 1) 00:59:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 00:59:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000061200215f0000000070e600000a"], 0x24}}, 0x0) 00:59:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 2) [ 2953.290181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16198 comm=syz-executor.2 [ 2953.293626] FAULT_INJECTION: forcing a failure. [ 2953.293626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2953.296124] CPU: 0 PID: 16196 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2953.297607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.299368] Call Trace: [ 2953.299932] dump_stack+0x107/0x167 [ 2953.300731] should_fail.cold+0x5/0xa [ 2953.301540] _copy_from_user+0x2e/0x1b0 [ 2953.302386] iovec_from_user+0x141/0x400 [ 2953.303253] __import_iovec+0x67/0x590 [ 2953.304077] ? __ia32_sys_shutdown+0x80/0x80 [ 2953.305026] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.306149] import_iovec+0x83/0xb0 [ 2953.306935] sendmsg_copy_msghdr+0x131/0x160 [ 2953.307863] ? do_recvmmsg+0x6d0/0x6d0 [ 2953.308704] ? lock_downgrade+0x6d0/0x6d0 [ 2953.309588] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.310706] ___sys_sendmsg+0xc6/0x170 [ 2953.311532] ? sendmsg_copy_msghdr+0x160/0x160 [ 2953.312511] ? __fget_files+0x2cf/0x520 [ 2953.313368] ? lock_downgrade+0x6d0/0x6d0 [ 2953.314256] ? find_held_lock+0x2c/0x110 [ 2953.315133] ? __fget_files+0x2f8/0x520 [ 2953.315989] ? __fget_light+0xea/0x290 [ 2953.316829] __sys_sendmsg+0xe5/0x1b0 [ 2953.317640] ? __sys_sendmsg_sock+0x40/0x40 [ 2953.318547] ? rcu_read_lock_any_held+0x75/0xa0 [ 2953.319533] ? fput_many+0x2f/0x1a0 [ 2953.320295] ? ksys_write+0x1a9/0x260 [ 2953.321128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2953.322238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2953.323320] ? trace_hardirqs_on+0x5b/0x180 [ 2953.324235] do_syscall_64+0x33/0x40 [ 2953.325031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2953.326122] RIP: 0033:0x7fd129b8bb19 [ 2953.326905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.331764] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2953.333855] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 2953.335743] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2953.337449] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.339014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2953.340629] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 00:59:50 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 81) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:59:50 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000071200215f0000000070e600000a"], 0x24}}, 0x0) [ 2953.389147] loop1: detected capacity change from 0 to 1536 [ 2953.395673] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:59:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x80000000, @loopback, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa, 0x54010, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xda000000, 0x4, @perf_config_ext={0xfffffffffffffffa, 0x2}, 0x800, 0x5, 0x8, 0xd, 0x3, 0x80000000, 0x9, 0x0, 0x6, 0x0, 0x100000000000006}, 0xffffffffffffffff, 0xf, r2, 0x0) syz_io_uring_setup(0x7a8a, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}, 0x9) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 00:59:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000080001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2953.462444] loop1: detected capacity change from 0 to 1536 [ 2953.467493] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2953.473407] FAULT_INJECTION: forcing a failure. [ 2953.473407] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.474750] CPU: 1 PID: 16212 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2953.475552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.476520] Call Trace: [ 2953.476848] dump_stack+0x107/0x167 [ 2953.477274] should_fail.cold+0x5/0xa [ 2953.477719] ? create_object.isra.0+0x3a/0xa30 [ 2953.478249] should_failslab+0x5/0x20 [ 2953.478693] kmem_cache_alloc+0x5b/0x310 [ 2953.479164] ? mark_lock+0xf5/0x2df0 [ 2953.479598] create_object.isra.0+0x3a/0xa30 [ 2953.480107] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2953.480717] kmem_cache_alloc_node+0x169/0x330 [ 2953.481245] ? fib6_table_lookup+0x636/0xaf0 [ 2953.481758] __alloc_skb+0x6d/0x5b0 [ 2953.482184] alloc_skb_with_frags+0x92/0x570 [ 2953.482697] ? mark_lock+0xf5/0x2df0 [ 2953.483127] ? mark_lock+0xf5/0x2df0 [ 2953.483562] sock_alloc_send_pskb+0x7af/0x930 [ 2953.484088] ? sk_alloc+0x350/0x350 [ 2953.484508] ? find_held_lock+0x2c/0x110 [ 2953.484991] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2953.485606] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2953.486193] ? rawv6_exit+0x20/0x20 [ 2953.486619] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2953.487174] ? ip6_mtu+0x1e9/0x3d0 [ 2953.487583] ? ip6_setup_cork+0xfb7/0x1740 [ 2953.488073] ip6_append_data+0x1e6/0x330 [ 2953.488549] ? rawv6_exit+0x20/0x20 [ 2953.488981] ? rawv6_exit+0x20/0x20 [ 2953.489407] icmp6_send+0x1250/0x1f30 [ 2953.489859] ? icmpv6_push_pending_frames+0x470/0x470 [ 2953.490454] ? find_held_lock+0x2c/0x110 [ 2953.490944] ? ip6_dst_hoplimit+0x440/0x440 [ 2953.491448] ip6_pkt_drop+0x3d2/0x7f0 [ 2953.491891] ? ip6_pkt_discard+0x20/0x20 [ 2953.492359] ip6_local_out+0x29f/0x4c0 [ 2953.492826] ip6_send_skb+0x117/0x460 [ 2953.493270] udp_v6_send_skb+0x7b7/0x1620 [ 2953.493759] udpv6_sendmsg+0x216b/0x2b40 [ 2953.494237] ? ip_frag_init+0x350/0x350 [ 2953.494703] ? udp_v6_push_pending_frames+0x360/0x360 [ 2953.495310] ? lock_acquire+0x197/0x470 [ 2953.495771] ? find_held_lock+0x2c/0x110 [ 2953.496249] ? sock_has_perm+0x1ea/0x280 [ 2953.496740] ? __import_iovec+0x458/0x590 [ 2953.497227] ? udp_v6_push_pending_frames+0x360/0x360 [ 2953.497827] inet6_sendmsg+0x105/0x140 [ 2953.498276] ? inet6_compat_ioctl+0x320/0x320 [ 2953.498801] __sock_sendmsg+0xf2/0x190 [ 2953.499252] ____sys_sendmsg+0x334/0x870 [ 2953.499726] ? sock_write_iter+0x3d0/0x3d0 [ 2953.500211] ? do_recvmmsg+0x6d0/0x6d0 [ 2953.500771] ? __lock_acquire+0x1657/0x5b00 [ 2953.501337] ___sys_sendmsg+0xf3/0x170 [ 2953.501838] ? sendmsg_copy_msghdr+0x160/0x160 [ 2953.502570] ? __fget_files+0x2cf/0x520 [ 2953.503114] ? lock_acquire+0x197/0x470 [ 2953.503627] ? find_held_lock+0x2c/0x110 [ 2953.504286] ? __might_fault+0xd3/0x180 [ 2953.504831] ? lock_downgrade+0x6d0/0x6d0 [ 2953.505458] __sys_sendmmsg+0x195/0x470 [ 2953.505997] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2953.506637] ? lock_downgrade+0x6d0/0x6d0 [ 2953.507175] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2953.507737] ? wait_for_completion_io+0x270/0x270 [ 2953.508298] ? rcu_read_lock_any_held+0x75/0xa0 [ 2953.508842] ? vfs_write+0x354/0xb10 [ 2953.509274] ? fput_many+0x2f/0x1a0 [ 2953.509694] ? ksys_write+0x1a9/0x260 [ 2953.510135] ? __ia32_sys_read+0xb0/0xb0 [ 2953.510610] __x64_sys_sendmmsg+0x99/0x100 [ 2953.511099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2953.511694] do_syscall_64+0x33/0x40 [ 2953.512123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2953.512725] RIP: 0033:0x7fb085b27b19 [ 2953.513153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.515294] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2953.516177] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2953.517013] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2953.517842] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.518667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2953.519492] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2953.819800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=16224 comm=syz-executor.7 [ 2967.811446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16232 comm=syz-executor.2 01:00:04 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r5 = fcntl$dupfd(r4, 0x406, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) 01:00:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 01:00:04 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) syz_io_uring_setup(0x19b5, &(0x7f0000003480)={0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000340)="24ccfd1e4bfdc2cfa265e21a3fa24125d95f33e1a4db3f06464c136585410bdc5b2a6834db06228f65a1f97068f09b4a15c6227ebb64247d2bfc068217e6aeef62b6d27ee3881794f6aa868864b9540d515c72666c0d743b03efa8738b80ef2d016ddef784f0fec0892243272640ba", 0x6f}, {&(0x7f0000000280)="3183e8b9a0e81753d1878bf9c5b0e65912e6faef1b9c60321b375f5dd21e82c0c8010f590e611ebcd94d3bd66e57b02807", 0x31}], 0x2, &(0x7f0000000640)=[@dstopts={{0x68, 0x29, 0x37, {0x5c, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x10000}, @calipso={0x7, 0x38, {0x0, 0xc, 0x1f, 0xa774, [0x0, 0xcd53, 0x200, 0x10000, 0x0, 0x78]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts={{0xb8, 0x29, 0x37, {0x2c, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x7ff}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3f}, @calipso={0x7, 0x30, {0x2, 0xa, 0x76, 0x8, [0xce, 0x3, 0xff, 0x8, 0x0]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xff, 0x41, "00bce22cabebfdfb57c132bf15ee9d9e9ecd379c6db13d3321c7b1096b60df69bbdefd5a903e311cf60a461fc9259b09dcebaeb70a7e4bdc511627746a5ad97a29"}, @jumbo={0xc2, 0x4, 0xbe7d}]}}}], 0x120}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000440)="2605327bd21c2ea50e33e9dfc986cbbd0fa9eb8bcbddf3af7af889748baa125b", 0x20}, {&(0x7f0000000500)="72e4f1f8490a68f563edeb0724e056ee79fec69fb6b6a1c5ca905010dc1a0b821d93a200d933e8f9e25297111b1e2bd6b3d2bcfdf3a3e9c3db4cef8aad8b88aedc2e77b0abbc9ed38bd66eb0605ed03ab08bd83f2d261d062533729fb2d177810a7d7350cb4e5bce3fbf402bb12fb933ef787650be94fbf983c8bbc4fd4fab6f89bca10430288830252d4143b23616c7c7e6febd333a9a616e709d7e87f0e07547a0113d4c05baa8c125496df6c37328d3657088fe00a12c6b5150b07be73c789c2ced96e8153d9fa717fb214d", 0xcd}, {&(0x7f0000000780)="a479a4ace2792c1f2d94e529b5f61549b537a820b2a2046d36c06c91ebaba6f5607c40fb2529fe31a969ebcaf2e35063a1e4fc0e77983399718bdf7b99e7f6fb7d593d04de44fa8492c41f073f833d280cfcbf8fa0c610af26e84c2a5d17f07adacdbcaaa535cdd79e759b09c0d84b0ae3cb36", 0x73}, {&(0x7f0000000800)="c63f8b438224495bcb6d22e86110add466a7e221193e35248db0ea9ed205a5590fdf927cd2fc0b8ba10a1384c3167342a1bd72657e7a5ab3d5dd711219970241a0dd83b717c749a91a4ad41d78cbbbc224b3adaa92e16fce6a2bb408a92beffb2d19c7c5b64f3738ad7f86f971075150b4f373540dc8c27714a8c976c01ee302787d15b500fa0c8b1db809d1bd64262916fa81d4c3e71f49819fa5648f934a8017fa56ca029767e9", 0xa8}, {&(0x7f00000008c0)="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", 0xfb}, {&(0x7f00000009c0)="4986a421c2cde5e1866af3498a88475e", 0x10}, {&(0x7f0000000a00)="fcef0ebac41f08b4fd486e36", 0xc}, {&(0x7f0000000a40)="ac084466385b713c3011ef525247d09378ac366c26916a", 0x17}], 0x8, &(0x7f0000000b00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xffffff00}}], 0x18}}, {{&(0x7f0000000b40)={0xa, 0x4e24, 0x1, @remote, 0x5}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000b80)="19f758aae88df1218bb70bc7168cef323c69ce65bbd3cf367ee284a3c6aab1efc5187ba5979017c0ef159a5c8eb3d568c15db41f046d40dd4fccf644c2bc0eeac50891e78c5a602ad11732da", 0x4c}, {&(0x7f0000000c00)="3773e5916e55e66202b4002a8fbfab978c1f1e", 0x13}, {&(0x7f0000000c40)="d95c7bf8ed0178d2a25b8f17cdf0f3b98992ee2f61ed94cf1e366ff4c2b9cc3bc110bd7ff86a9059312fda72cc591c163ad7c9c053bc80b35d98c3a66301d0c5ed7691b0b16208e5b9a587448861c5512fd011bdfbfea84b214280c235c7e559ee144d3fc2ad3774157cbfbf82defaecd7cbec47dfb671273c2b1e7b6f0b50a251ddd2608220133efa7bccec9df079a616204f1f64cf5cd52e3cc790c055789ffd26d916f46f7087df436454bba9942a2ff3885191a2ec288af6050171d0597a092ab82841021c2f1c9c244e622664fd5463c0a6ccad59927f65389dec8029", 0xdf}, {&(0x7f0000000d40)="c876109a235423295f4e1074dede87bc1904f0c4d3fe39042ca237bc672f14cc12ede63bf6c51489ba0b475c928dc0847791c2b79546fbe07a1b2ad59fa5f6124f354e3b5d775ccc4e8602805783c05e5919bb7c7a9ad0cbc860fc560949264611b5", 0x62}, {&(0x7f0000000dc0)="f3f622ec95fe5a7a1d9210fdec4761eb2440ace4c74da317529906221fbf4d4ae2af89632f7cedc4dfa42b6bfb5db760ecf4d3733c6a87ff3ab4567dcb43dbfc42a13a74d6771780fb773f6a81babe48d756709902fde6771dc7d9ee3401eb3a4f1fb8c50eef1fd2859bec3493da1477248528b19a8531c041327359c0ad03df1d3a7a4958494263d2264097debaab3ab0ddc0b87522a4aef202f4b095acd8d9fff2270db01accdb47b346f9547c0728bcf56f4256a7ba5c6bd0a948d00fb7db5fee6c4195709c773bff4a4bf5728901a076044fd286edf422a580738c2b1f45491c64a1d7cf", 0xe6}, {&(0x7f0000000ec0)="e6d4611b2b92fd198547925618", 0xd}, {&(0x7f0000000f00)="e3eb30704c957526ae083eaef26aabefac28fb12e0548f918b82410ad67839547a0d08ebedbf338d7fd0c3b2b8405ca1e58736840c541d68191f7e25e8492986ef61aa6365ee11921bce454095869e39127d17d188c48e5adb65e0d7d748dc6d7109ef1be3c2a4027cddb42163c238a7edd997e932aa375b929f7bfbd5d479c19ae92bf74111888ca045e734797f1e970d1ebb38771e2a1c4859f5b9639ae4b4aff9a01affcee9352baaad55669b4ac51351", 0xb2}], 0x7}}], 0x3, 0x20004804) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 01:00:04 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 01:00:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000091200215f0000000070e600000a"], 0x24}}, 0x0) 01:00:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 3) 01:00:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000080080001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 01:00:04 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 82) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2967.830253] FAULT_INJECTION: forcing a failure. [ 2967.830253] name failslab, interval 1, probability 0, space 0, times 0 [ 2967.832701] CPU: 1 PID: 16238 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2967.834198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2967.835980] Call Trace: [ 2967.836556] dump_stack+0x107/0x167 [ 2967.837359] should_fail.cold+0x5/0xa [ 2967.838182] ? __alloc_skb+0x6d/0x5b0 [ 2967.839006] should_failslab+0x5/0x20 [ 2967.839830] kmem_cache_alloc_node+0x55/0x330 [ 2967.840801] __alloc_skb+0x6d/0x5b0 [ 2967.841605] netlink_sendmsg+0x998/0xe00 [ 2967.842488] ? netlink_unicast+0xa00/0xa00 [ 2967.843409] ? netlink_unicast+0xa00/0xa00 [ 2967.844321] __sock_sendmsg+0x154/0x190 [ 2967.845192] ____sys_sendmsg+0x70d/0x870 [ 2967.845831] 9pnet: Insufficient options for proto=fd [ 2967.846072] ? sock_write_iter+0x3d0/0x3d0 [ 2967.846096] ? do_recvmmsg+0x6d0/0x6d0 [ 2967.848922] ? lock_downgrade+0x6d0/0x6d0 [ 2967.848944] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2967.848965] ___sys_sendmsg+0xf3/0x170 [ 2967.848991] ? sendmsg_copy_msghdr+0x160/0x160 [ 2967.852773] ? __fget_files+0x2cf/0x520 [ 2967.853642] ? lock_downgrade+0x6d0/0x6d0 [ 2967.854531] ? find_held_lock+0x2c/0x110 [ 2967.854568] ? __fget_files+0x2f8/0x520 [ 2967.856280] ? __fget_light+0xea/0x290 [ 2967.857125] __sys_sendmsg+0xe5/0x1b0 [ 2967.857950] ? __sys_sendmsg_sock+0x40/0x40 [ 2967.858886] ? rcu_read_lock_any_held+0x75/0xa0 [ 2967.859948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2967.861126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2967.862241] ? trace_hardirqs_on+0x5b/0x180 [ 2967.863178] do_syscall_64+0x33/0x40 [ 2967.863992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2967.865123] RIP: 0033:0x7fd129b8bb19 [ 2967.865938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2967.869970] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2967.871622] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 2967.872090] FAULT_INJECTION: forcing a failure. [ 2967.872090] name failslab, interval 1, probability 0, space 0, times 0 [ 2967.873176] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2967.873189] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 2967.873200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2967.873211] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 2967.881861] CPU: 0 PID: 16241 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2967.883306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2967.885060] Call Trace: [ 2967.885619] dump_stack+0x107/0x167 [ 2967.886386] should_fail.cold+0x5/0xa [ 2967.887192] should_failslab+0x5/0x20 [ 2967.887992] __kmalloc_node_track_caller+0x74/0x3b0 [ 2967.889052] ? alloc_skb_with_frags+0x92/0x570 [ 2967.890020] ? fib6_table_lookup+0x636/0xaf0 [ 2967.890957] __alloc_skb+0xb1/0x5b0 [ 2967.891743] alloc_skb_with_frags+0x92/0x570 01:00:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000f1200215f0000000070e600000a"], 0x24}}, 0x0) [ 2967.891767] ? mark_lock+0xf5/0x2df0 [ 2967.891788] ? mark_lock+0xf5/0x2df0 [ 2967.891813] sock_alloc_send_pskb+0x7af/0x930 [ 2967.891847] ? sk_alloc+0x350/0x350 [ 2967.891877] ? find_held_lock+0x2c/0x110 [ 2967.891902] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2967.891936] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2967.891970] ? rawv6_exit+0x20/0x20 [ 2967.892004] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 01:00:04 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setpipe(r2, 0x407, 0x8) creat(&(0x7f0000000000)='\x00', 0x51) r3 = dup3(r0, r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) r6 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x43, 0x3a, 0x1, 0x0, 0x6, 0x400, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe928, 0x0, @perf_config_ext={0x5, 0x3}, 0x3203, 0x6, 0x28ee, 0x1, 0x7ff, 0x20, 0x3, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xe, r5, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x7, 0x6, 0x68, 0x9, 0x0, 0x8f, 0x5800, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xeb57, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x48042, 0x3, 0xfffffffb, 0x6, 0x9, 0x0, 0x1ff, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r6, 0x0) [ 2967.892022] ? ip6_mtu+0x1e9/0x3d0 [ 2967.892041] ? ip6_setup_cork+0xfb7/0x1740 [ 2967.892065] ip6_append_data+0x1e6/0x330 [ 2967.892080] ? rawv6_exit+0x20/0x20 [ 2967.892101] ? rawv6_exit+0x20/0x20 [ 2967.892126] icmp6_send+0x1250/0x1f30 [ 2967.892165] ? icmpv6_push_pending_frames+0x470/0x470 [ 2967.892185] ? find_held_lock+0x2c/0x110 [ 2967.892238] ? ip6_dst_hoplimit+0x440/0x440 01:00:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300000000000b0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 01:00:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 4) [ 2967.892267] ip6_pkt_drop+0x3d2/0x7f0 [ 2967.892288] ? ip6_pkt_discard+0x20/0x20 [ 2967.892306] ip6_local_out+0x29f/0x4c0 [ 2967.892330] ip6_send_skb+0x117/0x460 [ 2967.892356] udp_v6_send_skb+0x7b7/0x1620 [ 2967.892391] udpv6_sendmsg+0x216b/0x2b40 [ 2967.892415] ? ip_frag_init+0x350/0x350 [ 2967.892447] ? udp_v6_push_pending_frames+0x360/0x360 [ 2967.892468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2967.892490] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2967.892531] ? lock_acquire+0x197/0x470 [ 2967.892550] ? find_held_lock+0x2c/0x110 [ 2967.892587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2967.892604] ? sock_has_perm+0x1ea/0x280 [ 2967.892650] ? __import_iovec+0x458/0x590 [ 2967.892672] ? udp_v6_push_pending_frames+0x360/0x360 [ 2967.892694] inet6_sendmsg+0x105/0x140 [ 2967.892712] ? inet6_compat_ioctl+0x320/0x320 01:00:05 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000481200215f0000000070e600000a"], 0x24}}, 0x0) [ 2967.892732] __sock_sendmsg+0xf2/0x190 [ 2967.892755] ____sys_sendmsg+0x334/0x870 [ 2967.892780] ? sock_write_iter+0x3d0/0x3d0 [ 2967.892795] ? do_recvmmsg+0x6d0/0x6d0 [ 2967.892830] ? __lock_acquire+0x1657/0x5b00 [ 2967.892861] ___sys_sendmsg+0xf3/0x170 [ 2967.892881] ? sendmsg_copy_msghdr+0x160/0x160 [ 2967.892903] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2967.892922] ? _raw_spin_unlock_irq+0x27/0x30 [ 2967.892950] ? lock_acquire+0x197/0x470 [ 2967.892969] ? find_held_lock+0x2c/0x110 [ 2967.892995] ? __might_fault+0xd3/0x180 [ 2967.893015] ? lock_downgrade+0x6d0/0x6d0 [ 2967.893054] __sys_sendmmsg+0x195/0x470 [ 2967.893077] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2967.893098] ? lock_downgrade+0x6d0/0x6d0 [ 2967.893135] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2967.893158] ? wait_for_completion_io+0x270/0x270 [ 2967.893182] ? rcu_read_lock_any_held+0x75/0xa0 [ 2967.893201] ? vfs_write+0x354/0xb10 [ 2967.893222] ? fput_many+0x2f/0x1a0 [ 2967.893238] ? ksys_write+0x1a9/0x260 [ 2967.893260] ? __ia32_sys_read+0xb0/0xb0 [ 2967.893285] __x64_sys_sendmmsg+0x99/0x100 [ 2967.893307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2967.893326] do_syscall_64+0x33/0x40 [ 2967.893346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2967.893359] RIP: 0033:0x7fb085b27b19 [ 2967.893378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2967.893389] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2967.893410] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2967.893422] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2967.893433] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2967.893444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2967.893456] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2967.894907] loop1: detected capacity change from 0 to 1536 [ 2967.907193] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2968.134008] FAULT_INJECTION: forcing a failure. [ 2968.134008] name failslab, interval 1, probability 0, space 0, times 0 [ 2968.134040] CPU: 0 PID: 16260 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2968.134050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2968.134056] Call Trace: [ 2968.134082] dump_stack+0x107/0x167 [ 2968.134104] should_fail.cold+0x5/0xa [ 2968.134125] ? create_object.isra.0+0x3a/0xa30 [ 2968.134142] should_failslab+0x5/0x20 [ 2968.134161] kmem_cache_alloc+0x5b/0x310 [ 2968.134184] create_object.isra.0+0x3a/0xa30 [ 2968.134200] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2968.134224] kmem_cache_alloc_node+0x169/0x330 [ 2968.134250] __alloc_skb+0x6d/0x5b0 01:00:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000180001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2968.134275] netlink_sendmsg+0x998/0xe00 [ 2968.134299] ? netlink_unicast+0xa00/0xa00 [ 2968.134328] ? netlink_unicast+0xa00/0xa00 [ 2968.134348] __sock_sendmsg+0x154/0x190 [ 2968.134368] ____sys_sendmsg+0x70d/0x870 [ 2968.134390] ? sock_write_iter+0x3d0/0x3d0 [ 2968.134403] ? do_recvmmsg+0x6d0/0x6d0 [ 2968.134427] ? lock_downgrade+0x6d0/0x6d0 [ 2968.134449] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2968.134470] ___sys_sendmsg+0xf3/0x170 [ 2968.134488] ? sendmsg_copy_msghdr+0x160/0x160 [ 2968.134511] ? __fget_files+0x2cf/0x520 [ 2968.134529] ? lock_downgrade+0x6d0/0x6d0 [ 2968.134549] ? find_held_lock+0x2c/0x110 [ 2968.134577] ? __fget_files+0x2f8/0x520 [ 2968.134603] ? __fget_light+0xea/0x290 [ 2968.134625] __sys_sendmsg+0xe5/0x1b0 [ 2968.134641] ? __sys_sendmsg_sock+0x40/0x40 [ 2968.134659] ? rcu_read_lock_any_held+0x75/0xa0 [ 2968.134694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 01:00:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2968.134714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2968.134730] ? trace_hardirqs_on+0x5b/0x180 [ 2968.134750] do_syscall_64+0x33/0x40 [ 2968.134769] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2968.134781] RIP: 0033:0x7fd129b8bb19 [ 2968.134799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2968.134810] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2968.134830] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 2968.134841] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2968.134852] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 2968.134862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2968.134873] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 2968.138950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:00:05 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x1, 0x1ac}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x4134, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2968.297091] loop1: detected capacity change from 0 to 1536 01:00:05 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400004c1200215f0000000070e600000a"], 0x24}}, 0x0) [ 2968.310347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16274 comm=syz-executor.2 [ 2968.317710] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:00:05 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 83) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:00:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300000000001c0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2968.473724] loop1: detected capacity change from 0 to 1536 [ 2968.485217] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2968.517150] FAULT_INJECTION: forcing a failure. [ 2968.517150] name failslab, interval 1, probability 0, space 0, times 0 [ 2968.519738] CPU: 0 PID: 16283 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2968.521211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2968.522956] Call Trace: [ 2968.523515] dump_stack+0x107/0x167 [ 2968.524287] should_fail.cold+0x5/0xa [ 2968.525111] ? create_object.isra.0+0x3a/0xa30 [ 2968.526067] should_failslab+0x5/0x20 [ 2968.526870] kmem_cache_alloc+0x5b/0x310 [ 2968.527738] create_object.isra.0+0x3a/0xa30 [ 2968.528673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2968.529766] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2968.530830] ? alloc_skb_with_frags+0x92/0x570 [ 2968.531793] ? fib6_table_lookup+0x636/0xaf0 [ 2968.532726] __alloc_skb+0xb1/0x5b0 [ 2968.533509] alloc_skb_with_frags+0x92/0x570 [ 2968.534445] ? mark_lock+0xf5/0x2df0 [ 2968.535233] ? mark_lock+0xf5/0x2df0 [ 2968.536022] sock_alloc_send_pskb+0x7af/0x930 [ 2968.537036] ? sk_alloc+0x350/0x350 [ 2968.537805] ? find_held_lock+0x2c/0x110 [ 2968.538671] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2968.539800] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2968.540876] ? rawv6_exit+0x20/0x20 [ 2968.541664] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2968.542683] ? ip6_mtu+0x1e9/0x3d0 [ 2968.543434] ? ip6_setup_cork+0xfb7/0x1740 [ 2968.544325] ip6_append_data+0x1e6/0x330 [ 2968.545190] ? rawv6_exit+0x20/0x20 [ 2968.545965] ? rawv6_exit+0x20/0x20 [ 2968.546735] icmp6_send+0x1250/0x1f30 [ 2968.547554] ? icmpv6_push_pending_frames+0x470/0x470 [ 2968.548641] ? find_held_lock+0x2c/0x110 [ 2968.549537] ? ip6_dst_hoplimit+0x440/0x440 [ 2968.550458] ip6_pkt_drop+0x3d2/0x7f0 [ 2968.551257] ? ip6_pkt_discard+0x20/0x20 [ 2968.552110] ip6_local_out+0x29f/0x4c0 [ 2968.552943] ip6_send_skb+0x117/0x460 [ 2968.553755] udp_v6_send_skb+0x7b7/0x1620 [ 2968.554643] udpv6_sendmsg+0x216b/0x2b40 [ 2968.555505] ? ip_frag_init+0x350/0x350 [ 2968.556360] ? udp_v6_push_pending_frames+0x360/0x360 [ 2968.557470] ? perf_event_task_disable+0x390/0x390 [ 2968.558514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2968.559620] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2968.560786] ? trace_hardirqs_on+0x5b/0x180 [ 2968.561722] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2968.562877] ? sock_has_perm+0x1ea/0x280 [ 2968.563758] ? __import_iovec+0x458/0x590 [ 2968.564636] ? udp_v6_push_pending_frames+0x360/0x360 [ 2968.565735] inet6_sendmsg+0x105/0x140 [ 2968.566566] ? inet6_compat_ioctl+0x320/0x320 [ 2968.567506] __sock_sendmsg+0xf2/0x190 [ 2968.568331] ____sys_sendmsg+0x334/0x870 [ 2968.569198] ? sock_write_iter+0x3d0/0x3d0 [ 2968.570081] ? do_recvmmsg+0x6d0/0x6d0 [ 2968.570914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2968.572021] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2968.573175] ? trace_hardirqs_on+0x5b/0x180 [ 2968.574084] ___sys_sendmsg+0xf3/0x170 [ 2968.574903] ? sendmsg_copy_msghdr+0x160/0x160 [ 2968.575873] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2968.576814] ? _raw_spin_unlock_irq+0x27/0x30 [ 2968.577777] ? finish_task_switch+0x1a4/0x5d0 [ 2968.578715] ? __switch_to+0x572/0xf70 [ 2968.579540] ? __switch_to_asm+0x3a/0x60 [ 2968.580390] ? __switch_to_asm+0x34/0x60 [ 2968.581264] ? __schedule+0x82c/0x1ea0 [ 2968.582095] ? io_schedule_timeout+0x140/0x140 [ 2968.583079] __sys_sendmmsg+0x195/0x470 [ 2968.583926] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2968.584853] ? lock_downgrade+0x6d0/0x6d0 [ 2968.585758] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2968.586781] ? wait_for_completion_io+0x270/0x270 [ 2968.587807] ? rcu_read_lock_any_held+0x75/0xa0 [ 2968.588791] ? vfs_write+0x354/0xb10 [ 2968.589589] ? fput_many+0x2f/0x1a0 [ 2968.590353] ? ksys_write+0x1a9/0x260 [ 2968.591161] ? __ia32_sys_read+0xb0/0xb0 [ 2968.592030] __x64_sys_sendmmsg+0x99/0x100 [ 2968.592935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2968.594016] do_syscall_64+0x33/0x40 [ 2968.594807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2968.595890] RIP: 0033:0x7fb085b27b19 [ 2968.596677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2968.600552] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2968.602129] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2968.603631] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2968.605143] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2968.606645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2968.608142] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 01:00:05 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 01:00:05 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000681200215f0000000070e600000a"], 0x24}}, 0x0) 01:00:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300000000003f0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 2968.732833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16300 comm=syz-executor.2 01:00:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 01:00:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 5) 01:00:05 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2968.744051] loop1: detected capacity change from 0 to 1536 [ 2968.751018] FAULT_INJECTION: forcing a failure. [ 2968.751018] name failslab, interval 1, probability 0, space 0, times 0 [ 2968.753482] CPU: 0 PID: 16303 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2968.754964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2968.756728] Call Trace: [ 2968.757306] dump_stack+0x107/0x167 [ 2968.758083] should_fail.cold+0x5/0xa [ 2968.758898] should_failslab+0x5/0x20 [ 2968.759724] __kmalloc_node_track_caller+0x74/0x3b0 [ 2968.760778] ? netlink_sendmsg+0x998/0xe00 [ 2968.761696] __alloc_skb+0xb1/0x5b0 [ 2968.762474] netlink_sendmsg+0x998/0xe00 [ 2968.763351] ? netlink_unicast+0xa00/0xa00 [ 2968.764257] ? netlink_unicast+0xa00/0xa00 [ 2968.765164] __sock_sendmsg+0x154/0x190 [ 2968.766013] ____sys_sendmsg+0x70d/0x870 [ 2968.766881] ? sock_write_iter+0x3d0/0x3d0 [ 2968.767774] ? do_recvmmsg+0x6d0/0x6d0 [ 2968.768612] ? lock_downgrade+0x6d0/0x6d0 [ 2968.769512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2968.770630] ___sys_sendmsg+0xf3/0x170 [ 2968.771469] ? sendmsg_copy_msghdr+0x160/0x160 [ 2968.772447] ? __fget_files+0x2cf/0x520 [ 2968.773306] ? lock_downgrade+0x6d0/0x6d0 [ 2968.774181] ? find_held_lock+0x2c/0x110 [ 2968.775054] ? __fget_files+0x2f8/0x520 [ 2968.775910] ? __fget_light+0xea/0x290 [ 2968.776743] __sys_sendmsg+0xe5/0x1b0 [ 2968.777557] ? __sys_sendmsg_sock+0x40/0x40 [ 2968.778476] ? rcu_read_lock_any_held+0x75/0xa0 [ 2968.779483] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2968.780598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2968.781703] ? trace_hardirqs_on+0x5b/0x180 [ 2968.782627] do_syscall_64+0x33/0x40 [ 2968.783422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2968.784512] RIP: 0033:0x7fd129b8bb19 [ 2968.785311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2968.789220] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2968.790856] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 2968.792380] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2968.793905] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 2968.795414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2968.796933] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 2968.839804] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2983.152313] FAULT_INJECTION: forcing a failure. [ 2983.152313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2983.153694] CPU: 0 PID: 16320 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2983.154472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2983.155401] Call Trace: [ 2983.155704] dump_stack+0x107/0x167 [ 2983.156115] should_fail.cold+0x5/0xa [ 2983.156547] _copy_from_user+0x2e/0x1b0 [ 2983.156995] __copy_msghdr_from_user+0x91/0x4b0 [ 2983.157522] ? __ia32_sys_shutdown+0x80/0x80 [ 2983.158021] ? udp_v6_push_pending_frames+0x360/0x360 [ 2983.158604] ? inet6_sendmsg+0xbd/0x140 [ 2983.159048] ? inet6_compat_ioctl+0x320/0x320 [ 2983.159552] ? __sock_sendmsg+0x55/0x190 [ 2983.160008] sendmsg_copy_msghdr+0xa1/0x160 [ 2983.160496] ? do_recvmmsg+0x6d0/0x6d0 [ 2983.160935] ? __lock_acquire+0x1657/0x5b00 [ 2983.161434] ___sys_sendmsg+0xc6/0x170 [ 2983.161868] ? sendmsg_copy_msghdr+0x160/0x160 [ 2983.162382] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2983.162978] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2983.163484] ? trace_hardirqs_on+0x5b/0x180 [ 2983.163984] ? lock_acquire+0x197/0x470 [ 2983.164430] ? find_held_lock+0x2c/0x110 [ 2983.164894] ? __might_fault+0xd3/0x180 [ 2983.165355] ? lock_downgrade+0x6d0/0x6d0 [ 2983.165835] __sys_sendmmsg+0x195/0x470 [ 2983.166283] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2983.166772] ? lock_downgrade+0x6d0/0x6d0 [ 2983.167251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2983.167798] ? wait_for_completion_io+0x270/0x270 [ 2983.168347] ? rcu_read_lock_any_held+0x75/0xa0 [ 2983.168872] ? vfs_write+0x354/0xb10 [ 2983.169300] ? fput_many+0x2f/0x1a0 [ 2983.169708] ? ksys_write+0x1a9/0x260 [ 2983.170138] ? __ia32_sys_read+0xb0/0xb0 [ 2983.170598] __x64_sys_sendmmsg+0x99/0x100 [ 2983.171076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2983.171656] do_syscall_64+0x33/0x40 [ 2983.172074] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2983.172650] RIP: 0033:0x7fb085b27b19 [ 2983.173072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2983.175138] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2983.175998] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2983.176797] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2983.177602] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2983.178403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2983.179203] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 01:00:20 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 84) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:00:20 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="1369928876e5813509"]) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x8, 0x100000000, 0x9}) 01:00:20 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400006c1200215f0000000070e600000a"], 0x24}}, 0x0) 01:00:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000000630001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 01:00:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 01:00:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 6) 01:00:20 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x90004, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x70dde263}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000180)=0x4) r4 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x35e5, &(0x7f0000003480)={0x0, 0x20, 0x20, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 01:00:20 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) [ 2983.185884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16323 comm=syz-executor.2 [ 2983.195310] 9pnet: Insufficient options for proto=fd [ 2983.198998] loop1: detected capacity change from 0 to 1536 [ 2983.200930] FAULT_INJECTION: forcing a failure. [ 2983.200930] name failslab, interval 1, probability 0, space 0, times 0 [ 2983.202336] CPU: 0 PID: 16329 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2983.203121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2983.203125] Call Trace: [ 2983.203143] dump_stack+0x107/0x167 [ 2983.203157] should_fail.cold+0x5/0xa [ 2983.203180] ? create_object.isra.0+0x3a/0xa30 [ 2983.206781] should_failslab+0x5/0x20 [ 2983.207228] kmem_cache_alloc+0x5b/0x310 [ 2983.207696] create_object.isra.0+0x3a/0xa30 [ 2983.208201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2983.208789] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2983.209387] ? netlink_sendmsg+0x998/0xe00 [ 2983.209885] __alloc_skb+0xb1/0x5b0 [ 2983.210305] netlink_sendmsg+0x998/0xe00 [ 2983.210781] ? netlink_unicast+0xa00/0xa00 [ 2983.211272] ? netlink_unicast+0xa00/0xa00 [ 2983.211764] __sock_sendmsg+0x154/0x190 [ 2983.212224] ____sys_sendmsg+0x70d/0x870 [ 2983.212693] ? sock_write_iter+0x3d0/0x3d0 [ 2983.213190] ? do_recvmmsg+0x6d0/0x6d0 [ 2983.213643] ? lock_downgrade+0x6d0/0x6d0 [ 2983.214124] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2983.214731] ___sys_sendmsg+0xf3/0x170 [ 2983.215179] ? sendmsg_copy_msghdr+0x160/0x160 [ 2983.215708] ? __fget_files+0x2cf/0x520 [ 2983.216164] ? lock_downgrade+0x6d0/0x6d0 [ 2983.216642] ? find_held_lock+0x2c/0x110 [ 2983.217128] ? __fget_files+0x2f8/0x520 [ 2983.217591] ? __fget_light+0xea/0x290 [ 2983.218043] __sys_sendmsg+0xe5/0x1b0 [ 2983.218476] ? __sys_sendmsg_sock+0x40/0x40 [ 2983.218972] ? rcu_read_lock_any_held+0x75/0xa0 [ 2983.219521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2983.220125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2983.220717] ? trace_hardirqs_on+0x5b/0x180 [ 2983.221226] do_syscall_64+0x33/0x40 [ 2983.221656] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2983.222246] RIP: 0033:0x7fd129b8bb19 [ 2983.222672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2983.224788] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2983.225682] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 2983.226517] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2983.227342] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 2983.228167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2983.228990] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 2983.236087] 9pnet: Insufficient options for proto=fd [ 2983.246060] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:00:20 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000741200215f0000000070e600000a"], 0x24}}, 0x0) 01:00:20 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4010, 0xffffffffffffffff, 0x10000000) r2 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r2}, 0x10001) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={'trans=virtio,', {[{@version_L}, {@cachetag}, {@access_uid}, {@fscache}, {@posixacl}, {@access_any}, {@access_user}, {@privport}, {@noextend}], [{@fowner_gt={'fowner>', r3}}, {@dont_hash}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x34, 0x33, 0x36, 0x65, 0x33, 0x32, 0x39], 0x2d, [0x38, 0x32, 0x34, 0x64], 0x2d, [0x33, 0x54, 0x62, 0x65], 0x2d, [0x31, 0x35, 0x39, 0x7c], 0x2d, [0x0, 0x34, 0x37, 0x62, 0x32, 0x52, 0x31, 0x5e]}}}]}}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup3(r0, r4, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) 01:00:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000004800001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 01:00:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2983.355398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16347 comm=syz-executor.2 [ 2983.362481] 9pnet_virtio: no channels available for device syz [ 2983.369238] loop1: detected capacity change from 0 to 1536 [ 2983.376643] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2983.461844] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2984.185930] 9pnet_virtio: no channels available for device syz 01:00:35 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 85) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:00:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000ffffff8c0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 01:00:35 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB='=wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) r6 = fsmount(0xffffffffffffffff, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) r7 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1168, 0x1b, 0x200, 0x70bd26, 0x25dfdbfc, {0x1}, [@typed={0x7, 0x6a, 0x0, 0x0, @str='*#\x00'}, @typed={0x8, 0x14, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x96}, @nested={0x113e, 0x79, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @fd=r7}, @generic="d3bcd2f109ebe2f2a118b8d2d8c40820983f5ecdacba11c1cd66b6444be832b634c2b9bc4b7ccd8e69aae4f8a26b8df2649afa9a173a8fa019c570a555db0a5954ade7fa5397f1cab0a7905a61bc10da710c52534c47336e76749766d7b2b5b74d5c7e75b8391bdf1c499e6386ed0662ddc53fba7bb71b22e5347cc6bd41f067619a08498a24d5c97a3c3c8c19d3050f05f4615c8a071a7eb76d64ff1d89b1697f22f7656a87a3703ed4f9cbb536e4325facd1b735bbdfba4c8ca0afaf34c353e8cc2cb49cc0a3ebf2b53ee16791f100a735be4e4a08729b30b97aa6f1bb6fd08e318abfe78e1282dc149089e74089312eef0685a0f707e044103e9051b6cc1b966171607e8fc37914092bc927e9cb1d5ffb1585eca559fb893369eb66f772097caf8997840999b351ddc13503a1433c8c20987ef51daee142a346db898e126c2c1a076ea3645a2c1389dffcd0ef894bcadee1a815bf89c5df931754226608daa9b31f7977365c1fb5b21744e238ec1a275af54da626a8fa1572d73e4cf4b96aaa837b99902dbfda1304d30752a42008893006417ab4628ce6902785baec590097a723810c69e1b9a7cdd0557eaee61507c15f5adead6e4beb6c043b70669a3a80fcc106711a5c722edd479519777a9e125f7d2b1603d9bfe16e126cddb9812c2fe4cd4534a4abd40ae47779115083cb8938f75a8f25b018d98ca72345eaaec6719d0cc00c58bff3268f83034027df12c6c5cb291e45a2cb724464b79be04519814b9012d007bf3e0e44f9e10df7dbcf8e9da9a44c6cd6e81dccd640921456a1c2148b8a76577b9755bdf81e51599a273eca94d6824b665b5e954563b918035c089ccfeb93f7b12add9866f0182b87a1190881cc3489f729866cf7622c15ee20dce01640c974b412a4fa6a79a9dae71d05a51d93d420cdd99f84a928e35cfd74b6702b5ad96c7e133377ea8841cac7ca0de9fb70c940d8572d3e33a7073465347185361894fa8d8b9589d08b2876c97700c0b63cbe8d3c42a7aba304d709dfdb381aa90850ebcc53fc1dfa2b40e3c986209041584d4f2263426ee39503c2b903ee809d62e13395eeedd3575d59291c0d734355427beb120c7fc73e3338037bc7dff37a67e9c2319581b025cc488de0ed4e3f9ada1b42a3f0f789ebeb9c7dc86a01195d90325eefb3fdad56be801c458491c8992c817e37bfa7934d4ad41e753088af2b136646c57a65895e6d4c843563581e22bc91edf33b5e4783cce88a350350a29f06d6cd3c490747a2fa036f517a41755f0c5e7855f7b6ebd5f408bc4713380c13c1f72f4de1637e807a176da8c8529818401962315ea64bcb0def49a4707e2c6372a625608d09458216dff44e8d8e67d3dc3e3cf4a3fe6cc71d7fe1e173fa7b5a476a7e674f477ab2f6a8f712680b3f5b23bcb278b3e323a2b41799e3602e44114dc22e08ca3012c46243e9d7c1c44eda7c10507f805bf10fc7c3f3649d093549c75cd85e41e9c65c57aab2a18d265c1e916ac2821304931c0385c9b90fd11b85ce7fc616add56f02fc3b204952a2f974edb6e277c93fa4d09ba82fe2b6229e89a68441715e4e2a978d72b3303cf553d84a58091137bfc940fa4e929db6aee831f2c4502b0180582891c4c45ac4a1fa47ec72acb65915de87340e5a11138fcdffd563d90faab4ae09274ea2e385decde3960c5e8bab76a9e23a921bc9b0642184ac38cb8d0ff60d3ce43977eabd7900f997fb9e4ee6fa01a7af2bce152b6da5a89c51f34f999d69e671f767ffe618180e2e67375806d4f1a29652a66bc9d9379934903ac5ab2aceace47fdf64f04a29b5da8e9a86360864bacc96a91d4947fa666f769ddc150a2b7c383e8c6b645dc0720854991b06ec8dcb34618a8ddaa7d0646e7c37167e30ffbe5de64f50da9f1274d21da22a581cb80405bef52338d2405c56214bd0649d97022ac5c53c56f977e00492974df1258d5ecf91ed7b102f6fbbc20d8a9e93e7e49588872f7fecf548c34c346741238b6b43c50f8d2e5cddff8b794b6260b3076c9c085053dea3db28fa81539b99b63e02f9de45c4d26c340ae049dcd2d9f035d5162ebec77e21cf86dd15992b06ec577ada246f6e7b3b601806cf6538e8562d9cfbab1f7c4856a0ccb10714a7ea0584725eee2e3e7a38f22bd9065db518bb85546bba03fa6ebd62f177b397c2986cf7f6dc9b2e2350e31dad9b5b00ee28907b8b7a9ac0e436acb11ad7a5ac6a40db82d248fc1a1fff66e0b707dc87bbe862809f83742b74f3991902f32121f5eafaa2d3b4d6f7cab07e1eb1603601256c5a6be11b47ee96b6e786adbc6ca7a1cc2c55ac5fc51e2962468c433f3dddf1d837b882e50881327aa26c4d0026848f9da32604e81b52403e50077b1642134b1516928d677fe559e0d15552ec425cc22ba058d7084537330a004164cf7ec2c5f9e7e1d5906c927500c8c00d543953ee0a98b976cf64c05c7e2d0a0079a266c52d8644800c9ee9ca321d36a704787c1c92fd34b5d10a053090d7249fa114e024519fb48e99ac9111c45905d6c2e665e8608f64678efdd6cdabd3dfe69eb07e25d18f7933db151319e1c9e3164597fa4fd42291223aa568d510a35159b62898fb03dd44694340631906187eeee66f13dfc2bd532336d51a973eccd0b337845be7a014c94eb833b65cbafaa7d38ceed0875c74bf25adb1f10cdffee2ed1d330983b6d657d1e49e51898dbf07fe4c94d6f9f7c5c483b646930f0d2272d1bc7d5d9b0ecea2e562ce6aa21bde637c4d34e43da432cf969325750891b311b1a80e8d2d26c8375a01cd0a748a04782169611610b61e743fa421590d8530377bcf61c3f281f27d4fff56933f487475ce4dad09a8e8b8f288451b2c1826101cc22150dadcd0996ad0bd225de3d36c001e20f5b079da90a1ad6cde70637ef963e51f9eb93ed896647b954dc555ef7a5abdfc37db8511290a53584a838e5541e1e9e6abcfe2a502bf8cce5922b02cb0700360cbcf83008850a258717edd51f94458f543242c9b4711bede3ad08955a1be4866cf46f454980ba5eae656063fd8a8432f8ddcf917d7ff39bf6e9627b89018b992c99e4a5e39a9a0cdfebd51f06d770edbd350bf5b786548f7e2bb86a8272566f2de724796b1a256bb59981a213990c3b24f5a51980f13eade82bc2cf01861ce1e4faf5a597c74971f1ff66dbb1647b75f4752ef476ea159482654d4aff27d38a254f16195a7f6656a5197d29050ef8c1061f91ebf7a4659072a750ce97c6209047d12067d28707216f55568e415d1cf9de3bba961bc653119ff54712b3e06b81e738cc3d6920c34df56aa4482fa7bd35f62fd090c56a916f24114b6ab8be9e66262c761e0d9b79096d38ab2885050111841ef2122b416e94fe983433756cf063e5a2b85bcffaea0bcb5077b5d34885cf8e4f41883cecbe6bafdff37cf23efeddb2adcb01ca8fa3adf2743a6cb09eacee22bc4a228a3a2ede03018c4696f5c5d7deeb2127cae9b9b1d1279fa5279da5dea4ec5135c5fff5a8971b65315c80d1db183d6b6c55735c19ccf8e9b2ad2057e0128d36631b04e593571a9842dc215944b35404ab40cf257a0db3561f722c43ab6fff0002f378c5934d5f4b3b1f3cd3dc1f59e9d508f11d97f7d3307bffa2d0b1792ab39ceb583723f216ae06c5c373b30b3f371c8d5fb0a52730cd9a163bad619e2650db554e10b8b7296f3b8f8c8c881690be5c2fedeee321f593ac6c84e0b363d3f97fb4aaa75b2f4b75e1e886e7107c8bbcab2c36283c7c04d013c9b3cefa4f899041b217b44ee820af7f5b7f28493d46a06418d2124303d8c5579b00cd599aa0d81b3db35c89402d86f573b0c4a9ab2aec52a7846fa5e5f0e69bdaec752a1a11b4d5a8e6d7ad5ed9cce9b10c1412c314219ac6704ea41e078f52bbd0c3daa8e7dee8ec591f42f32f7472c428c98479f72329fda501c57f3c39af2a4d1f0679bf49cc21954e9395c62dd881c88b718294786b1d28e48b2ccf015ed42b77f8c1b4737ac6479ef5b3ba9231f20c94c5bc7ec04b6434ca392368e25f7b413968283a23be0692f4430a648bccc1f9c5c2b0a43fab5acba4c5d23452644a785d92a7a87ca600858e619a72b43b629d152894843bcc06cbdc06b085d9b73ef580c54c2711c8618f57c821b31784042535a6231bb6f9627555a9b99c68cf2718a52e791dd765ceaa4146545f438e063976f38600ced5b6a6ccc9c1fb560c0a74d248c89d3d079416196e4e2a246c08db406adcc26d84d092f292fdd69f903236db9262149c6e7784ebee7411847191babe768873e99978900711c73d9c35017116ec30b419bd642c7304d70b72c094e024edf1aae714a5eb572fcb257b45763797205de3da4e5b02c18ba692005defa5f680363d20c8fe12516bfe9d7d3f6259eca742e2d1eb4049c82143cbabbe80c485fcbc3cd5747d2c0d01f66083fde9159525c1b0a73324205ee2151d6f61a12e546cfc917d85972e2d8634daeeb3de434e9e43482127143defde2d5e9c9f7aa2a89bf483439f2812247ef8ff5d2dcfa196c3cc73e71c47733e0cd318d7e85ba3a0bbbf276a0753bd9d633bf7fba012e6ecdac77f8073806e01ec1547dd4e92f1855ed47548594dcc4295631e4dee1fd7c59fe46d042f9c84e1eac39d55eb0f5a8008e90288a54099c7efc749692f825f044927509f274cc529574f4e330ff5d61ab2071d06b141c3d26905bd975dbd1a1a3f0fb6808ffb8d88b609881f2c518a4a6a348f8e90ce99a6df9325e4bc3ea380af6805160d221d65449b730041682bde669e661ccf80520f475d7d6ac60b9fdb0fbc05f8f719bbcfa2c8243905c6648727ca4a1bc45c18ab8bb1266c338d19171621600c43cd3623d130d70ce0c06308fb0d1383856bee6713370fbe07e0b40ad0c628314a221c653ee384bc2f27956447780c2f41d7ec490031258d2260a94648642bcd7a9cd21f37e5f0236e4d281f716f034b874f5c64c271eeff1c4413b6c185e64da9d8958474588aa24213457df8bbab6676a4e23e9b772c6c7cf3b478f926c068475f81e01c3f0ac76f58f9528a59f62645de099eeb42955a3d84d82ee35f4424aad75b2210932a29a0290d84e7017d3b6122ee10868c992841632d2cac8ed0ee0615aa882ae117977666ed2a0913519e8e9d392f2c8227b811b27f180f1ab82370fc0366d642d04e0fb6308dccaa931aaee260eb8ad83369bf4d5d94e51b948876c71d94521db1845be983a95d534238fa562e92227ebe066f3abd1a4beddefed3cf240fbadee2ce3edc66a0c71dab9cbe763f1e5b9f67729534cccb36082f3f536236de5e1da0972e40b50642d9d1b16498ba585402d4b401b18bc662b9803a5fc52f2a92110e8e79befcafab54c98565cc0d148d63a5b861f3aa194a7ca2b7adf9d2ff01a45f14c820a470382080c7bbf4ecf52c143abada5635c41a09da79b6a3dff5a4332fd3fd2f0a26f35897ad626729f0952ed1083977fead6944159cc7f604d8e423d28437abf33605af07763e9fdd9a4f744a4719d57b364169a278eb53c6806e7ab537adf7dd312f1c21796544ce7c6c93ea3e0b19d06f8d832b23162c6b16e512e76fcb4987c7d9649a3547107dfd3778027db2ff6a231162795f6b07bb732d958f0f6e9b0913b8b20aae8f25de7b5d3849b8c9cea7665cdd16a2a67a35d1e68fd87d4909bbf4857023e38b6c1db28f8489d4244767db27a2d6157e9acc9b992b0fb57474ba86c3763d15964e3c426191cf166f3dc", @generic="38613b782214c08022fd4d00757f191569be49f9a32d330372171856166ecd453fe0b549e1424eb2c3798f80275b7332d5561b91318927783323c1810e5dbace996418607eb9e491fc1231b8ef5f75914aa8c31ba24904000805f87fc2", @generic="6175ed5c08ff9c95a4bb99013280580379ff846f4e2a1c303d4e2bc7626b0806330dc40c076df0f86bd8a67089eb7710abe8c46044cf1a37e3b38d2f8662446aa52904af198a8ee5f1f88e4a019734662f107fc9436e7f5554da0c1eda3083e60d57b9a929ca4ce3d86496efa5c7410fff7b5851755c0ba19e987ba969ea10029f89aba99006fd04108d5bda7f0b53e79ebd07b9d3cef1a57317ee0318f0674a27500e4ca4df71144500de2d5de90eb11604489e6a08cdb6f84c5099cc28e09b085ff46c66890f0d0ce5fb23a7", @typed={0x8, 0x7e, 0x0, 0x0, @pid}]}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4}, 0x4) 01:00:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 7) 01:00:35 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) [ 2998.907638] FAULT_INJECTION: forcing a failure. [ 2998.907638] name failslab, interval 1, probability 0, space 0, times 0 [ 2998.910527] CPU: 1 PID: 16360 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2998.912283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2998.914382] Call Trace: [ 2998.915111] dump_stack+0x107/0x167 [ 2998.916074] should_fail.cold+0x5/0xa [ 2998.917039] ? create_object.isra.0+0x3a/0xa30 [ 2998.918203] should_failslab+0x5/0x20 [ 2998.919166] kmem_cache_alloc+0x5b/0x310 [ 2998.920200] create_object.isra.0+0x3a/0xa30 [ 2998.921308] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2998.922603] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2998.923897] ? netlink_sendmsg+0x998/0xe00 [ 2998.925033] __alloc_skb+0xb1/0x5b0 [ 2998.925998] netlink_sendmsg+0x998/0xe00 [ 2998.927029] ? netlink_unicast+0xa00/0xa00 [ 2998.928091] ? netlink_unicast+0xa00/0xa00 [ 2998.929145] __sock_sendmsg+0x154/0x190 [ 2998.930154] ____sys_sendmsg+0x70d/0x870 [ 2998.930181] ? sock_write_iter+0x3d0/0x3d0 [ 2998.932041] ? do_recvmmsg+0x6d0/0x6d0 [ 2998.933020] ? lock_downgrade+0x6d0/0x6d0 [ 2998.934067] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2998.934091] ___sys_sendmsg+0xf3/0x170 [ 2998.934116] ? sendmsg_copy_msghdr+0x160/0x160 [ 2998.937249] ? __fget_files+0x2cf/0x520 [ 2998.938247] ? lock_downgrade+0x6d0/0x6d0 [ 2998.939282] ? find_held_lock+0x2c/0x110 [ 2998.940305] ? __fget_files+0x2f8/0x520 [ 2998.941304] ? __fget_light+0xea/0x290 [ 2998.941331] __sys_sendmsg+0xe5/0x1b0 [ 2998.941355] ? __sys_sendmsg_sock+0x40/0x40 [ 2998.944161] ? rcu_read_lock_any_held+0x75/0xa0 [ 2998.945344] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2998.946671] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2998.947956] ? trace_hardirqs_on+0x5b/0x180 [ 2998.949042] do_syscall_64+0x33/0x40 [ 2998.949984] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2998.951284] RIP: 0033:0x7fd129b8bb19 [ 2998.952215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2998.956870] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2998.958838] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 2998.960657] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2998.962464] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.964306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2998.966140] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 2998.980361] loop1: detected capacity change from 0 to 1536 [ 2998.998128] FAULT_INJECTION: forcing a failure. [ 2998.998128] name failslab, interval 1, probability 0, space 0, times 0 [ 2999.000341] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2999.000870] CPU: 0 PID: 16367 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2999.003908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2999.006031] Call Trace: [ 2999.006750] dump_stack+0x107/0x167 [ 2999.007737] should_fail.cold+0x5/0xa [ 2999.008770] ? __alloc_skb+0x6d/0x5b0 [ 2999.009657] should_failslab+0x5/0x20 [ 2999.010505] kmem_cache_alloc_node+0x55/0x330 [ 2999.011498] __alloc_skb+0x6d/0x5b0 [ 2999.012305] alloc_skb_with_frags+0x92/0x570 [ 2999.013268] sock_alloc_send_pskb+0x7af/0x930 [ 2999.014282] ? sk_alloc+0x350/0x350 [ 2999.015072] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2999.016211] ? lock_chain_count+0x20/0x20 [ 2999.017124] ? lock_chain_count+0x20/0x20 [ 2999.018038] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 2999.019376] ? ip_frag_init+0x350/0x350 [ 2999.020259] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 2999.021288] ? ip6_mtu+0x1e9/0x3d0 [ 2999.022081] ? ip6_setup_cork+0xfb7/0x1740 [ 2999.023023] ip6_make_skb+0x2df/0x4e0 [ 2999.023863] ? ip_frag_init+0x350/0x350 [ 2999.024735] ? ip_frag_init+0x350/0x350 [ 2999.025627] ? ip6_push_pending_frames+0xf0/0xf0 [ 2999.026700] ? ip6_dst_hoplimit+0x199/0x440 [ 2999.027648] ? lock_downgrade+0x6d0/0x6d0 [ 2999.028565] udpv6_sendmsg+0x2128/0x2b40 [ 2999.029470] ? ip_frag_init+0x350/0x350 [ 2999.030361] ? udp_v6_push_pending_frames+0x360/0x360 [ 2999.031494] ? perf_event_task_disable+0x390/0x390 [ 2999.032568] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2999.033623] ? lock_acquire+0x197/0x470 [ 2999.034502] ? find_held_lock+0x2c/0x110 [ 2999.035404] ? sock_has_perm+0x1ea/0x280 [ 2999.036311] ? __import_iovec+0x458/0x590 [ 2999.037224] ? udp_v6_push_pending_frames+0x360/0x360 [ 2999.038340] inet6_sendmsg+0x105/0x140 [ 2999.039198] ? inet6_compat_ioctl+0x320/0x320 [ 2999.040179] __sock_sendmsg+0xf2/0x190 [ 2999.041027] ____sys_sendmsg+0x334/0x870 [ 2999.041949] ? sock_write_iter+0x3d0/0x3d0 [ 2999.042957] ? do_recvmmsg+0x6d0/0x6d0 [ 2999.043818] ? __lock_acquire+0x1657/0x5b00 [ 2999.044758] ___sys_sendmsg+0xf3/0x170 [ 2999.045618] ? sendmsg_copy_msghdr+0x160/0x160 [ 2999.046600] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2999.047582] ? _raw_spin_unlock_irq+0x27/0x30 [ 2999.048578] ? lock_acquire+0x197/0x470 [ 2999.049455] ? find_held_lock+0x2c/0x110 [ 2999.050359] ? __might_fault+0xd3/0x180 [ 2999.051236] ? lock_downgrade+0x6d0/0x6d0 [ 2999.052156] __sys_sendmmsg+0x195/0x470 [ 2999.053009] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2999.053982] ? lock_downgrade+0x6d0/0x6d0 [ 2999.054891] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2999.055926] ? wait_for_completion_io+0x270/0x270 [ 2999.056969] ? rcu_read_lock_any_held+0x75/0xa0 [ 2999.057989] ? vfs_write+0x354/0xb10 [ 2999.058790] ? fput_many+0x2f/0x1a0 [ 2999.059577] ? ksys_write+0x1a9/0x260 [ 2999.060422] ? __ia32_sys_read+0xb0/0xb0 [ 2999.061316] __x64_sys_sendmmsg+0x99/0x100 [ 2999.062250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2999.063366] do_syscall_64+0x33/0x40 [ 2999.064165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2999.065287] RIP: 0033:0x7fb085b27b19 [ 2999.066125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2999.070110] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2999.071756] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 2999.073298] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 2999.074843] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2999.076385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2999.077932] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 2999.080022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:00:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 01:00:35 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 01:00:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400007a1200215f0000000070e600000a"], 0x24}}, 0x0) 01:00:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000007c00001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 01:00:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 2999.105746] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2999.127487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2999.133404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2999.134169] 9pnet: Insufficient options for proto=fd [ 2999.195781] 9pnet: Insufficient options for proto=fd 01:00:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002500215f0000000070e600000a"], 0x24}}, 0x0) 01:00:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 8) 01:00:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 2999.243286] loop1: detected capacity change from 0 to 1536 [ 2999.255783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16395 comm=syz-executor.2 [ 2999.296405] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2999.313414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:00:36 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto(r0, &(0x7f0000000340)="bb314a562aa9cfba89f1ec2245fda4ac0690f0948a86b81534f69d9f73c230de1f03e3ad39189b4c1326e7815aa5f4fbb289637e7e2becbd527db0217a7c956e827006a74a956a009e94537c87f410436b335ab2f5afd29cc9a4c3b6df1b416bebfc8870cb3dccdcec58147fe2da4016b5488e8157aa4e2971a15af5c9ccb83fd60aa7f93376554be050a9c5eadd8edf3631aaf4c729c70d9b4d23664b67a269e2edf147b21c3a83a7ec739970fd06be2a8e7e96d56109ab9e70930b10af8f26167e7a0c845acfd28958d1a7f64cc5a69b4c9521a172f0fd307924a03bf69a6ab2f090a2bcf13ba85f84cff1cb612e930a6eb2d31a5d57a6f19b29b41faacf641b022553258e2264c966566926ce132d14e64e7a9378d4971cf5faf35652c2b0b37380e900632c289f1f6dae4b5c879122ee1d1b91eda5cbd3766a522683aaa3143c17486f76ba37bfeab117518afb5eb2f1ef5cfc24a188dbcf183a8adeaeb96d36803d8b5946c14191e5d3b55b7492e048072a0f64b97646d669171f6c85eaa6bc469392e50629a87df4419487d37213a4fc4d6c4b655864d1b8f4ec3bebda8315a3bf3ac707f46b855cd57c4fb041d3eabba83ffe6dd44fd0cc0ea1cff27325b49d8ba3bb5d2d52190cfe6c66d9d0147d01f50a89ef780f16dfdddd719e332a76f7cd82bb32a149398b2b072cb6739c7980af903f23a702e38b0fae90e88fdd9dd1fcc56fe55a6cb76cf78efcdf0b9076c3059377f01fc23e884c143b37d69bbd549da90f9af001ef978d756186f85bc4335ff2f0d45283ffa02618c3c4ac3ef5ff757ab81cf12ebb349f342f97ad2bd2bdead2d30ca035259780a50f4fb690fc471905ccdf2b7ac7f25d382e8ab4495ecb0ac4436f7ab7df315995e6399395c4f54142aab1cd9c2d57c3bc136738730a3ac4be7ea259a6599f6ebd29f656e2194c46e2d64c03edb74d3fe8fc7f570eddc8996f0c64d1992f3b3bf1beba9c3d5b5a87e60bdb592d6450aee9e2e5a8bcb435f536f2e4cfcfad0fd6ca24a6b0dbbc76346c5fd4d0c8b9dbc9ba6b50d465d56bbff649c9ceef6ca0d693a99599618dc033cccac3ca93767dfb0cb54f131e5b34a75ecf1a84ca00c37da71d23f5890b824860634a797893e57e98dae1d32231def510990dca692690d2840fcb39e8ec67ef502e9833d752f16b874756ce1af1c81ad3d25e0d8c5770534a0394b3af5025e379f438d6078c8fbe4eb93c649cdf77da92d963fb2174bb49b0fade3e28ca47cb6ef06c0e9a258e7cb61d775c82b2df872fe776854307807e4767b77c748b53a93b79b661435870f0f9b988a847d275496a845f27d305f2d81e97b5ec8d8e1b53f3b5cea6637e03f09665509be445866aeb9f822230967c701b6ecc8c640247c7da3d1b8d4cc4eea45d9e97b955d709e280d1b838a280adc804a646d4ea0995a587fe3d35534b411c2644ea68831c360032399f139b5f851ecbff2874c7bce7d762bbfc6d9ed7ff2fe381ee38728a008dd14fdb5a905771c2f0370d0c4a1afe60b1423a5603f55297fe3b8367b2699bf72f73d59b176261a0fc70d6346cecee8d89b92ccbc5f94ffe50290f25297356b95a6a14fa148fd8a3fa868fd822f07d21ea2cca64ebb80230aa37f33a035b293abb4243ef0d3a4ba73f7ac9b6518228593f4bd9a44078a7b4aede14e24e3275257c4819eb86dbd81600496f19a58fec7b1549b0d9efc6632a06a94cff4b5999df976230868694d899d6d0f9e65fda87c9159c6c1e508859388382a640979ec606467d96c2e7ec33acce53f47ad3a21decb8ccd5a5f0efc096c484fd55b2b2a204b2eccfd6658e8632dbe1e028c4dea31c0c0d92cc78ec0e6e01b0a7e428fdb21dca478bcc1baeadca548932c9f4e8bf6deda620a4136b212b2e400b73e2b5daf4aa7a1029c3a3cce54194d4e4f5739c67c2f33e6911945e6e554b83f58fa0944c5ca43df7cc8876f61c731e9930acbbb61da4e48d8ef90e707edc59b20900e58dbaf7f7348b7b8b86407670db266a4b7a6854761b42ffa5d3ee9549e3a71a9cfb2c9e5966fbb1ccf1b84291c4337415ef1ab51e2077169a26cf3cad0bf81d6a7f557945d14eaa101425e5e775ca922408d00370caab15108eb64e2c7b993e61b7b08b22b025d007a0a03afe1bcbea48027ffcded91a57dc2c6556fc3c4c48ec887117f3a9abe2c8de2e7a718be4cd0595ba80933255687f1d982c7cc46e4b488fbb8e2fc363f45c29dccd3d0ce76fc58c5be6d5d89009520a68eb4387a0feca3f3ea5dec225c13326d27515f57c775a62f3e7b0637405c0f2292cfc58002b73cea16106dac996b3296e7ec04bb17778f7085912dbcecbb75a770aab912431398d06f9fe74e400bcfea78ce8a3cd086196d0f44efb29dd128ac1c3de2345c2627bee3eef8e7da49fa143c5c9b6d095a826b4586a1e5f4aaf1c1ac767bb37892e70592faf32b050ba94ac5f15cffc763e54ac1fde308950dbbb4b1820ead0f4ccdf4a13f37e05f7bc4f097f047efdc198a1038a2f6229cc84b57fb41d4d4e4110c44a98e865b5f26ddc75d570a1cc39c401d221f1e26f0e0dce877a7abce47dac9cf7ea071ac72e0156ed9112dc9ff6145e2b28ad7f4cbc2de0ac830ed4aaae750b09f1a8bcc4c3b6205e5d65162abeeb830c134bcfb2e558f8aacfcbc7a81f7c0d4fc3be15f2fb379cd30a55c137a44780dc342e7fc6d705b5d91662e9496395423f94262d8a7b950ce4a9d4a079e39e2633269e11e0062beb3fb3ffcb59a7fd0b11e11e119ff6c2541e95a7d496e12a246f2ca70122db13f4edc7ba595764e205caf24f36a7d641cc8f39609867f3404b143ebc3e2cbec0387006111ed0e204f84ca35369ac14d61b31bcf446551c6e3534c12e367daacaabe55263ab999abdc4405cf02a13f5be3cf7117950c264312b7968b9607b4f193d1923e169be36b9197b17f23f8d7f2232b46ff0444e09857da068b5b22fd7bcb7a41a0cab1a00adc5e94dd8d24f535dcd1bab9fdabef2b0f508e8cbc314a1f01c775a99b25f16465c9bffbcf6b27ac486731b5baf94adb4368de2f5147d7119d0c850cfc40c8033030e0bf791732301e18217224a580ef0f028146cb637dc86fdf82731759f4423dccc12e8c3d3142cfd6054a97c42b309f0f3c245931660e8ec811beda8ff0ab0cb8676077098d6058173ad126cd0cf5ceb5eddce1e015e30b9d63bca84c9a081464512b2a13fe8bc68c459aade273279d4ed9a9f7d46bf9e97de10df3909b7985c73244facda1c4c0d70ae09334141c0721dab7b5075c311d8045fccb1daf0d48b5a299b6ab035e3c69c2ff2dddffc8b653859487c8f683a6e4bd459c1381be8d09093e6baaaec27c536a8990a6db3a2b04f18b0019fd408dd8238f8ed1ccfb7fa8ef14d80b5817e65f1e7fc66ec2318187e8ce22c05c0494b01edd83f2c414aac2095fcbd427ec80761da2c6eba20de5f2bbb8b434ea003ae6591ebcdf8ce1afae2d1d1307aeefde45b5d3d5b338ac82ff017e29ba92b0dd7cd2b1b519bbfc159b3b2d7378e4efcbcf7d6dc254c478a8cffb5f5ce489d8bdf97d6965cd066129b7f850a5899976b1463aadb446868c7b56de32493a76ad3fb1bc4240386243e8ab60bab3e730913bd2d86e4761b33dc07891b257288ed113ad42a08609824468b646de12226b78fa11164f833a41a3ce9c91668c728716d53ccae4dc3bfe3f5d7098cc2f59165836c2a3f1aaedda6511d91bfc9636474970c18995432a42b78e20d4043c4f75d10ffeefb89ba524dfa31634751c8cfcfbf9788d351bb9ca53c933071cb6fac28f2fdbaf1312648b2beea14d6482c94ff366c216e86476f67e5c7ad048edb96ac6e1f59046baabfa8c423e2ad94e5d16b0a753ff5109c727ae7632fad0e94156eb180f228dab0ff50f54f3ba9c755a9a81ec40dc69ae9a57f4a9998f64668f1497f0ef6b920ef6ac0563bb0eb3b42341f94633b941f7a898b4593c855a7f8a8d368344fc54066b79015324cfb9ec29e5cf694d81a2ee480cbfe637d918bbe488d6f84e8e797d92ff50fa568328be381577066dcdbe9c2d4266181fb7bb7a7b0e5d932ac778d75f539b8e272a80908b430fd627c0a7924667603c441e06ca480b18207bb21cd9673649d958d8890b9880836145fbbac63ab26d8545bfeb202feb2955cc67bb030b7280b75ec79ed5bd7e6963ed114b2694231834f7dfb90f218bbc46c15bb78f4fb111835df5d062eaf9e89f05852f2877977a35214302d4a674fd0fc5d3c5bfdbf8a9265f011d913545eb9b36dca6807f149fc16e4386609d371af7f9f3a35540a83de7655233a9509f5f8e4a0e18618be85ba390d811bb6303204f0c179f0530451bb35abaaf05123b5aa36606b16db2678e9c8e524322d109b19ed6bb5407a2b0b57fe18725fd45cd46c065a7f44673f42908f2a738a247aec6cd310b720512a9cdbce65200f5e1284e0f4f6d07b139934c36eee1ee77c12c7ed2ae861809457427e8ddf6752f59191ec5732c38166babaf002036fabb77017aa477957ef517ee70fa16bc4c6da736b06620a143e7014ad001401af6e7fc05b53c17decc3900f934e140f475ff567afc8dd0669ed1d1f73f425752322fd8cbf9e78ece10d44d574a9069966f8fd1926e759cfaef7f7a3fc1dc3d6bb81853b475b74a49ef1b1bab03311ec2c65fb090addd1ee2581a4bcf04a8b7ae4fed141771451e90b8b46c082a89de6a166ed223ba744e5d21562cdecb5eae2b93f06bfd5359d5e3b1b152b1bc72472ac79dbd52e5f26b4059ee5fa76a5f0f55fdb501ddbe363c07b6faf27967e407a66b5bf440f50a8683032a9dd6f2fa4230c18b7327bb930b9363732a3ae6610698de085d9085cc5451645015f56a5fb1e6b259b830016d43fc99db15bca5f58348e532d0fe07d86236319c377df690b1d236c77bf4c9eb3d9978934a9cd8f72bd0ab722b0bebdd0ccf6102906135890f57bebdfa6e9b783ffd4ff6182bc0982ae06dcaa05c2d4fe339845b86aadc904054c68f6b0ae82aed480deaf1fae710a3dc416596cd2852c89570734e33dffb10d7c1e7db6ce76f28c661a7db6d5252ae98013ad70cb676ca4db9305bd64d5bdcd14ebcd3cf237048040cfd5ed6051a5fcbbcc94647988a268c7430d5e2832ab5dd8b64d4d85aeff60e95aa968d8edfb132ff4e44616c0834447932e34e2cf8bc1961de5f249ff1121588437fa99a5da4e145d3c6cddb1199cd0125eab8c774c359cbbf121f2f5c77b8590710cb754bd6e7d3f8170f00771548330dcf4ec5989cbbfb3cd1a7bb48e3e43b5445f53adce2c2c827ffca041948454ab23696d3b7d91a487caea9de8a5314c8a676c84a038f748707d719341e947813bba1b72be0cf25abe4cc2af0a4e5522eac4a07a4f34c9cc26db62b6118dc313f1f35c1fc372b9ab44d7b4bf9303184ce717c732520ef86c72852d7fab7d5c7a8339f0abfb9b4d0b7e9f6d0e43534eb11f6879676b6e23c61105f4244c07b3783872d20b2328617d4108dbc0ed2d405a78fdbd923a1fd8c2d3bf572a569c25e28e1699b36468df1201365c5a68a98fd08d54b0dd80b62d28843f20998de4e437bb5123af8388948e1a1d11a27b1055b8e63e7972b1e9f8ae7890208118a9cc196a8ae7b2a74a1d4ace5d5c5353c7ecc3325873722cd4ef817ff8dd6a231cbf70ec92b48ff7d1db45e4b4fab5d1fbcbbc874ed2d07ea50b722a60d246632ebc764deabe1280bea31ce3f37e886780b3e53296", 0x1000, 0x8cf80d7b553ff45d, &(0x7f0000000180)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) dup3(r5, r6, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000080)=0x3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x11a0010, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYRES64=r2]) [ 2999.336488] FAULT_INJECTION: forcing a failure. [ 2999.336488] name failslab, interval 1, probability 0, space 0, times 0 [ 2999.339003] CPU: 0 PID: 16400 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2999.340517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2999.342338] Call Trace: [ 2999.342917] dump_stack+0x107/0x167 [ 2999.343723] should_fail.cold+0x5/0xa [ 2999.344563] ? fib6_info_alloc+0x3c/0x110 [ 2999.345482] should_failslab+0x5/0x20 [ 2999.346317] __kmalloc+0x72/0x390 [ 2999.347082] fib6_info_alloc+0x3c/0x110 [ 2999.347941] ip6_route_info_create+0x379/0x1a10 [ 2999.348961] ? fib6_nh_init+0x1a50/0x1a50 [ 2999.349878] ip6_route_add+0x24/0x150 [ 2999.350710] inet6_rtm_newroute+0x156/0x170 [ 2999.351648] ? ip6_route_multipath_add+0x1e20/0x1e20 [ 2999.352762] ? rtnetlink_rcv_msg+0x3eb/0xd70 [ 2999.353768] ? ip6_route_multipath_add+0x1e20/0x1e20 [ 2999.354865] rtnetlink_rcv_msg+0x442/0xd70 [ 2999.355805] ? rtnl_getlink+0xaa0/0xaa0 [ 2999.356775] ? lock_acquire+0x197/0x470 [ 2999.357653] ? netlink_deliver_tap+0xf4/0xcc0 [ 2999.358632] netlink_rcv_skb+0x14b/0x430 [ 2999.359536] ? rtnl_getlink+0xaa0/0xaa0 [ 2999.360404] ? netlink_ack+0xab0/0xab0 [ 2999.361255] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2999.362263] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2999.363265] ? is_vmalloc_addr+0x7b/0xb0 [ 2999.364159] netlink_unicast+0x6ce/0xa00 [ 2999.365035] ? netlink_attachskb+0xab0/0xab0 [ 2999.366021] netlink_sendmsg+0x90f/0xe00 [ 2999.366920] ? netlink_unicast+0xa00/0xa00 [ 2999.367860] ? netlink_unicast+0xa00/0xa00 [ 2999.368796] __sock_sendmsg+0x154/0x190 [ 2999.369689] ____sys_sendmsg+0x70d/0x870 [ 2999.370590] ? sock_write_iter+0x3d0/0x3d0 [ 2999.371532] ? do_recvmmsg+0x6d0/0x6d0 [ 2999.372388] ? lock_downgrade+0x6d0/0x6d0 [ 2999.373304] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2999.374457] ___sys_sendmsg+0xf3/0x170 [ 2999.375324] ? sendmsg_copy_msghdr+0x160/0x160 [ 2999.376318] ? __fget_files+0x2cf/0x520 [ 2999.377185] ? lock_downgrade+0x6d0/0x6d0 [ 2999.378107] ? find_held_lock+0x2c/0x110 [ 2999.379010] ? __fget_files+0x2f8/0x520 [ 2999.379907] ? __fget_light+0xea/0x290 [ 2999.380764] __sys_sendmsg+0xe5/0x1b0 [ 2999.381612] ? __sys_sendmsg_sock+0x40/0x40 [ 2999.382548] ? rcu_read_lock_any_held+0x75/0xa0 [ 2999.383593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2999.384745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2999.385879] ? trace_hardirqs_on+0x5b/0x180 [ 2999.386834] do_syscall_64+0x33/0x40 [ 2999.387654] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2999.388769] RIP: 0033:0x7fd129b8bb19 [ 2999.388788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2999.388799] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2999.395345] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 2999.396876] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2999.397147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2999.398447] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 2999.398459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2999.398471] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 01:00:51 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 86) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:00:51 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 01:00:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 9) 01:00:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000fffffdef0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3014.751106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3014.755865] FAULT_INJECTION: forcing a failure. [ 3014.755865] name failslab, interval 1, probability 0, space 0, times 0 [ 3014.757417] CPU: 0 PID: 16410 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 3014.758345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3014.759448] loop1: detected capacity change from 0 to 1536 [ 3014.760176] Call Trace: [ 3014.760537] dump_stack+0x107/0x167 [ 3014.761024] should_fail.cold+0x5/0xa [ 3014.761529] ? create_object.isra.0+0x3a/0xa30 [ 3014.762140] should_failslab+0x5/0x20 [ 3014.762644] kmem_cache_alloc+0x5b/0x310 [ 3014.763182] create_object.isra.0+0x3a/0xa30 [ 3014.763759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3014.764428] __kmalloc+0x16e/0x390 [ 3014.764898] fib6_info_alloc+0x3c/0x110 [ 3014.765423] ip6_route_info_create+0x379/0x1a10 [ 3014.766044] ? fib6_nh_init+0x1a50/0x1a50 [ 3014.766590] ip6_route_add+0x24/0x150 [ 3014.767105] inet6_rtm_newroute+0x156/0x170 [ 3014.767675] ? ip6_route_multipath_add+0x1e20/0x1e20 [ 3014.768339] ? rtnetlink_rcv_msg+0x3eb/0xd70 [ 3014.768838] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3014.768934] ? ip6_route_multipath_add+0x1e20/0x1e20 [ 3014.771519] rtnetlink_rcv_msg+0x442/0xd70 [ 3014.772091] ? rtnl_getlink+0xaa0/0xaa0 [ 3014.772631] ? lock_acquire+0x197/0x470 [ 3014.773162] ? netlink_deliver_tap+0xf4/0xcc0 [ 3014.773778] netlink_rcv_skb+0x14b/0x430 [ 3014.774320] ? rtnl_getlink+0xaa0/0xaa0 [ 3014.774858] ? netlink_ack+0xab0/0xab0 [ 3014.775388] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3014.775998] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3014.776620] ? is_vmalloc_addr+0x7b/0xb0 [ 3014.777165] netlink_unicast+0x6ce/0xa00 [ 3014.777716] ? netlink_attachskb+0xab0/0xab0 [ 3014.778297] netlink_sendmsg+0x90f/0xe00 [ 3014.778850] ? netlink_unicast+0xa00/0xa00 [ 3014.779429] ? netlink_unicast+0xa00/0xa00 [ 3014.780012] __sock_sendmsg+0x154/0x190 [ 3014.780553] ____sys_sendmsg+0x70d/0x870 [ 3014.781096] ? sock_write_iter+0x3d0/0x3d0 [ 3014.781646] ? do_recvmmsg+0x6d0/0x6d0 [ 3014.782175] ? lock_downgrade+0x6d0/0x6d0 [ 3014.782719] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3014.783405] ___sys_sendmsg+0xf3/0x170 [ 3014.783915] ? sendmsg_copy_msghdr+0x160/0x160 [ 3014.784519] ? __fget_files+0x2cf/0x520 [ 3014.785041] ? lock_downgrade+0x6d0/0x6d0 [ 3014.785583] ? find_held_lock+0x2c/0x110 [ 3014.786128] ? __fget_files+0x2f8/0x520 [ 3014.786655] ? __fget_light+0xea/0x290 [ 3014.787163] __sys_sendmsg+0xe5/0x1b0 [ 3014.787660] ? __sys_sendmsg_sock+0x40/0x40 [ 3014.788221] ? rcu_read_lock_any_held+0x75/0xa0 [ 3014.788835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3014.789531] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3014.790209] ? trace_hardirqs_on+0x5b/0x180 [ 3014.790772] do_syscall_64+0x33/0x40 [ 3014.791275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3014.791955] RIP: 0033:0x7fd129b8bb19 [ 3014.792437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.794908] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3014.795923] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 3014.796847] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 3014.797785] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.798715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.799640] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 3014.803012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=16426 comm=syz-executor.6 [ 3014.805757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=16427 comm=syz-executor.6 [ 3014.808920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16421 comm=syz-executor.2 [ 3014.823118] FAULT_INJECTION: forcing a failure. [ 3014.823118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3014.826028] CPU: 1 PID: 16417 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3014.827623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 01:00:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 01:00:51 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 01:00:51 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 01:00:51 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000005f00215f0000000070e600000a"], 0x24}}, 0x0) [ 3014.829550] Call Trace: [ 3014.829575] dump_stack+0x107/0x167 [ 3014.829598] should_fail.cold+0x5/0xa [ 3014.829625] _copy_from_user+0x2e/0x1b0 [ 3014.829647] __copy_msghdr_from_user+0x91/0x4b0 [ 3014.829665] ? __ia32_sys_shutdown+0x80/0x80 [ 3014.829700] ? udp_v6_push_pending_frames+0x360/0x360 01:00:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 10) [ 3014.829723] ? inet6_sendmsg+0xbd/0x140 01:00:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000fffffff60001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3014.829740] ? inet6_compat_ioctl+0x320/0x320 [ 3014.829759] ? __sock_sendmsg+0x55/0x190 01:00:51 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000007300215f0000000070e600000a"], 0x24}}, 0x0) [ 3014.829782] sendmsg_copy_msghdr+0xa1/0x160 [ 3014.829798] ? do_recvmmsg+0x6d0/0x6d0 [ 3014.829821] ? __lock_acquire+0x1657/0x5b00 [ 3014.829850] ___sys_sendmsg+0xc6/0x170 [ 3014.829869] ? sendmsg_copy_msghdr+0x160/0x160 [ 3014.829890] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3014.829908] ? _raw_spin_unlock_irq+0x27/0x30 [ 3014.829935] ? lock_acquire+0x197/0x470 [ 3014.829953] ? find_held_lock+0x2c/0x110 [ 3014.829979] ? __might_fault+0xd3/0x180 [ 3014.829998] ? lock_downgrade+0x6d0/0x6d0 [ 3014.830034] __sys_sendmmsg+0x195/0x470 [ 3014.830056] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3014.830076] ? lock_downgrade+0x6d0/0x6d0 [ 3014.830114] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3014.830141] ? wait_for_completion_io+0x270/0x270 [ 3014.830166] ? rcu_read_lock_any_held+0x75/0xa0 [ 3014.830190] ? vfs_write+0x354/0xb10 [ 3014.830218] ? fput_many+0x2f/0x1a0 [ 3014.830235] ? ksys_write+0x1a9/0x260 [ 3014.830256] ? __ia32_sys_read+0xb0/0xb0 [ 3014.830284] __x64_sys_sendmmsg+0x99/0x100 [ 3014.830305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3014.830324] do_syscall_64+0x33/0x40 [ 3014.830345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3014.830360] RIP: 0033:0x7fb085b27b19 [ 3014.830383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.830397] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3014.830422] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 3014.830436] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 3014.830449] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.830463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3014.830478] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 3014.889855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3014.916163] loop1: detected capacity change from 0 to 1536 [ 3014.920453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3014.920527] FAULT_INJECTION: forcing a failure. [ 3014.920527] name failslab, interval 1, probability 0, space 0, times 0 [ 3014.920591] CPU: 1 PID: 16437 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 3014.920602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3014.920608] Call Trace: [ 3014.920633] dump_stack+0x107/0x167 [ 3014.920660] should_fail.cold+0x5/0xa [ 3014.957289] ? __alloc_skb+0x6d/0x5b0 [ 3014.958137] should_failslab+0x5/0x20 [ 3014.958959] kmem_cache_alloc_node+0x55/0x330 [ 3014.959949] __alloc_skb+0x6d/0x5b0 [ 3014.960739] netlink_ack+0x1ed/0xab0 [ 3014.961554] ? netlink_sendmsg+0xe00/0xe00 [ 3014.962481] ? lock_acquire+0x197/0x470 [ 3014.963339] ? netlink_deliver_tap+0xf4/0xcc0 [ 3014.964307] netlink_rcv_skb+0x348/0x430 [ 3014.965181] ? rtnl_getlink+0xaa0/0xaa0 [ 3014.966048] ? netlink_ack+0xab0/0xab0 [ 3014.966886] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3014.967873] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3014.968855] ? is_vmalloc_addr+0x7b/0xb0 [ 3014.969741] netlink_unicast+0x6ce/0xa00 [ 3014.970618] ? netlink_attachskb+0xab0/0xab0 [ 3014.971580] netlink_sendmsg+0x90f/0xe00 [ 3014.972475] ? netlink_unicast+0xa00/0xa00 [ 3014.973412] ? netlink_unicast+0xa00/0xa00 [ 3014.974338] __sock_sendmsg+0x154/0x190 [ 3014.975200] ____sys_sendmsg+0x70d/0x870 [ 3014.976080] ? sock_write_iter+0x3d0/0x3d0 [ 3014.976989] ? do_recvmmsg+0x6d0/0x6d0 [ 3014.977834] ? lock_downgrade+0x6d0/0x6d0 [ 3014.978722] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3014.979845] ___sys_sendmsg+0xf3/0x170 [ 3014.980675] ? sendmsg_copy_msghdr+0x160/0x160 [ 3014.981661] ? __fget_files+0x2cf/0x520 [ 3014.982527] ? lock_downgrade+0x6d0/0x6d0 [ 3014.983411] ? find_held_lock+0x2c/0x110 [ 3014.984294] ? __fget_files+0x2f8/0x520 [ 3014.985149] ? __fget_light+0xea/0x290 [ 3014.985991] __sys_sendmsg+0xe5/0x1b0 [ 3014.986808] ? __sys_sendmsg_sock+0x40/0x40 [ 3014.987740] ? rcu_read_lock_any_held+0x75/0xa0 [ 3014.988756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3014.989892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3014.990984] ? trace_hardirqs_on+0x5b/0x180 [ 3014.991905] do_syscall_64+0x33/0x40 [ 3014.992709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3014.993968] RIP: 0033:0x7fd129b8bb19 [ 3014.994876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.999362] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3015.001221] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 3015.002960] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 3015.003004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=16439 comm=syz-executor.6 [ 3015.004688] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 3015.004703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3015.004716] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 01:00:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 3015.012966] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:00:51 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 87) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 3015.025486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16441 comm=syz-executor.2 [ 3015.034320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=16442 comm=syz-executor.6 01:00:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000fffffdfc0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3015.067343] FAULT_INJECTION: forcing a failure. [ 3015.067343] name failslab, interval 1, probability 0, space 0, times 0 [ 3015.070196] CPU: 1 PID: 16444 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3015.071817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3015.073789] Call Trace: [ 3015.074414] dump_stack+0x107/0x167 [ 3015.074683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3015.075270] should_fail.cold+0x5/0xa [ 3015.077130] should_failslab+0x5/0x20 [ 3015.078045] __kmalloc_node_track_caller+0x74/0x3b0 [ 3015.079214] ? alloc_skb_with_frags+0x92/0x570 [ 3015.080301] __alloc_skb+0xb1/0x5b0 [ 3015.081157] alloc_skb_with_frags+0x92/0x570 [ 3015.082201] sock_alloc_send_pskb+0x7af/0x930 [ 3015.083281] ? sk_alloc+0x350/0x350 [ 3015.084140] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3015.085381] ? lock_chain_count+0x20/0x20 [ 3015.086357] ? lock_chain_count+0x20/0x20 [ 3015.087322] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 3015.088496] ? ip_frag_init+0x350/0x350 [ 3015.089451] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3015.090722] ? trace_hardirqs_on+0x5b/0x180 [ 3015.091744] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 3015.092895] ip6_make_skb+0x2df/0x4e0 [ 3015.093804] ? ip_frag_init+0x350/0x350 [ 3015.094740] ? ip_frag_init+0x350/0x350 [ 3015.095685] ? ip6_push_pending_frames+0xf0/0xf0 [ 3015.096776] ? ip6_dst_hoplimit+0x199/0x440 [ 3015.097806] ? lock_downgrade+0x6d0/0x6d0 [ 3015.098790] udpv6_sendmsg+0x2128/0x2b40 [ 3015.099753] ? ip_frag_init+0x350/0x350 [ 3015.100690] ? udp_v6_push_pending_frames+0x360/0x360 [ 3015.101913] ? perf_event_task_disable+0x390/0x390 [ 3015.103107] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 3015.104229] ? lock_acquire+0x197/0x470 [ 3015.105165] ? find_held_lock+0x2c/0x110 [ 3015.106145] ? sock_has_perm+0x1ea/0x280 [ 3015.107099] ? __import_iovec+0x458/0x590 [ 3015.108064] ? udp_v6_push_pending_frames+0x360/0x360 [ 3015.109259] inet6_sendmsg+0x105/0x140 [ 3015.110188] ? inet6_compat_ioctl+0x320/0x320 [ 3015.111231] __sock_sendmsg+0xf2/0x190 [ 3015.112129] ____sys_sendmsg+0x334/0x870 [ 3015.113088] ? sock_write_iter+0x3d0/0x3d0 [ 3015.114087] ? do_recvmmsg+0x6d0/0x6d0 [ 3015.115012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3015.116225] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3015.117494] ? trace_hardirqs_on+0x5b/0x180 [ 3015.118508] ___sys_sendmsg+0xf3/0x170 [ 3015.119395] ? sendmsg_copy_msghdr+0x160/0x160 [ 3015.120449] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3015.121470] ? _raw_spin_unlock_irq+0x27/0x30 [ 3015.122537] ? finish_task_switch+0x126/0x5d0 [ 3015.123586] ? finish_task_switch+0xef/0x5d0 [ 3015.124616] ? __switch_to+0x572/0xf70 [ 3015.125529] ? __switch_to_asm+0x3a/0x60 [ 3015.126484] ? __switch_to_asm+0x34/0x60 [ 3015.127075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3015.127430] ? __schedule+0x82c/0x1ea0 [ 3015.127457] ? io_schedule_timeout+0x140/0x140 [ 3015.130400] __sys_sendmmsg+0x195/0x470 [ 3015.131339] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3015.132339] ? lock_downgrade+0x6d0/0x6d0 [ 3015.133309] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3015.134453] ? wait_for_completion_io+0x270/0x270 [ 3015.135585] ? rcu_read_lock_any_held+0x75/0xa0 [ 3015.136682] ? vfs_write+0x354/0xb10 [ 3015.137535] ? fput_many+0x2f/0x1a0 [ 3015.138381] ? ksys_write+0x1a9/0x260 [ 3015.139260] ? __ia32_sys_read+0xb0/0xb0 [ 3015.140196] __x64_sys_sendmmsg+0x99/0x100 [ 3015.141176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3015.142369] do_syscall_64+0x33/0x40 [ 3015.143226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3015.144401] RIP: 0033:0x7fb085b27b19 [ 3015.145256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3015.149508] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3015.151298] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 3015.152954] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 3015.154643] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3015.156326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3015.158016] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 01:00:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 11) 01:00:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f00215f0000000070e600000a"], 0x24}}, 0x0) [ 3015.166217] FAULT_INJECTION: forcing a failure. [ 3015.166217] name failslab, interval 1, probability 0, space 0, times 0 [ 3015.167639] CPU: 0 PID: 16450 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 3015.168461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3015.169437] Call Trace: [ 3015.169756] dump_stack+0x107/0x167 [ 3015.170185] should_fail.cold+0x5/0xa [ 3015.170625] ? create_object.isra.0+0x3a/0xa30 [ 3015.171164] should_failslab+0x5/0x20 [ 3015.171611] kmem_cache_alloc+0x5b/0x310 [ 3015.172090] create_object.isra.0+0x3a/0xa30 [ 3015.172604] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3015.173202] kmem_cache_alloc_node+0x169/0x330 [ 3015.173744] __alloc_skb+0x6d/0x5b0 [ 3015.174178] netlink_ack+0x1ed/0xab0 [ 3015.174620] ? netlink_sendmsg+0xe00/0xe00 [ 3015.175123] ? lock_acquire+0x197/0x470 [ 3015.175594] ? netlink_deliver_tap+0xf4/0xcc0 [ 3015.176121] netlink_rcv_skb+0x348/0x430 [ 3015.176602] ? rtnl_getlink+0xaa0/0xaa0 [ 3015.177063] ? netlink_ack+0xab0/0xab0 [ 3015.177506] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3015.178057] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3015.178594] ? is_vmalloc_addr+0x7b/0xb0 [ 3015.179070] netlink_unicast+0x6ce/0xa00 [ 3015.179550] ? netlink_attachskb+0xab0/0xab0 [ 3015.180081] netlink_sendmsg+0x90f/0xe00 [ 3015.180563] ? netlink_unicast+0xa00/0xa00 [ 3015.181062] ? netlink_unicast+0xa00/0xa00 [ 3015.181555] __sock_sendmsg+0x154/0x190 [ 3015.182017] ____sys_sendmsg+0x70d/0x870 [ 3015.182494] ? sock_write_iter+0x3d0/0x3d0 [ 3015.182979] ? do_recvmmsg+0x6d0/0x6d0 [ 3015.183430] ? lock_downgrade+0x6d0/0x6d0 [ 3015.183917] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3015.184527] ___sys_sendmsg+0xf3/0x170 [ 3015.184974] ? sendmsg_copy_msghdr+0x160/0x160 [ 3015.185510] ? __fget_files+0x2cf/0x520 [ 3015.185987] ? lock_downgrade+0x6d0/0x6d0 [ 3015.186479] ? find_held_lock+0x2c/0x110 [ 3015.186953] ? __fget_files+0x2f8/0x520 [ 3015.187424] ? __fget_light+0xea/0x290 [ 3015.187888] __sys_sendmsg+0xe5/0x1b0 [ 3015.188336] ? __sys_sendmsg_sock+0x40/0x40 [ 3015.188839] ? rcu_read_lock_any_held+0x75/0xa0 [ 3015.189387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3015.190027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3015.190641] ? trace_hardirqs_on+0x5b/0x180 [ 3015.191133] do_syscall_64+0x33/0x40 [ 3015.191575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3015.192158] RIP: 0033:0x7fd129b8bb19 [ 3015.192591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3015.194702] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3015.195570] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 3015.196390] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 3015.197211] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 3015.198047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3015.198880] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 3015.206255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=16456 comm=syz-executor.6 [ 3015.216260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=16458 comm=syz-executor.6 01:00:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 3015.256608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16460 comm=syz-executor.2 [ 3015.270380] loop1: detected capacity change from 0 to 1536 [ 3015.276936] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3015.314428] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:00:52 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 01:00:52 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000215f0000000070e600000a"], 0x24}}, 0x0) 01:00:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 12) 01:00:52 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 01:00:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000fffffdfd0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3015.637256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3015.644454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 3015.647287] FAULT_INJECTION: forcing a failure. [ 3015.647287] name failslab, interval 1, probability 0, space 0, times 0 [ 3015.648639] CPU: 0 PID: 16471 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 3015.649439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3015.650426] Call Trace: [ 3015.650739] dump_stack+0x107/0x167 [ 3015.651165] should_fail.cold+0x5/0xa [ 3015.651614] should_failslab+0x5/0x20 [ 3015.652056] __kmalloc_node_track_caller+0x74/0x3b0 [ 3015.652640] ? netlink_ack+0x1ed/0xab0 [ 3015.653104] __alloc_skb+0xb1/0x5b0 [ 3015.653524] netlink_ack+0x1ed/0xab0 [ 3015.653960] ? netlink_sendmsg+0xe00/0xe00 [ 3015.654444] ? rtnl_getlink+0xaa0/0xaa0 [ 3015.654898] netlink_rcv_skb+0x348/0x430 [ 3015.655363] ? rtnl_getlink+0xaa0/0xaa0 [ 3015.655815] ? netlink_ack+0xab0/0xab0 [ 3015.656275] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3015.656815] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3015.657332] ? is_vmalloc_addr+0x7b/0xb0 [ 3015.657810] netlink_unicast+0x6ce/0xa00 [ 3015.658275] ? netlink_attachskb+0xab0/0xab0 [ 3015.658780] netlink_sendmsg+0x90f/0xe00 [ 3015.659252] ? netlink_unicast+0xa00/0xa00 [ 3015.659738] ? netlink_unicast+0xa00/0xa00 [ 3015.660227] __sock_sendmsg+0x154/0x190 [ 3015.660679] ____sys_sendmsg+0x70d/0x870 [ 3015.661148] ? sock_write_iter+0x3d0/0x3d0 [ 3015.661632] ? do_recvmmsg+0x6d0/0x6d0 [ 3015.662092] ? lock_downgrade+0x6d0/0x6d0 [ 3015.662567] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3015.663166] ___sys_sendmsg+0xf3/0x170 [ 3015.663613] ? sendmsg_copy_msghdr+0x160/0x160 [ 3015.664138] ? __fget_files+0x2cf/0x520 [ 3015.664591] ? lock_downgrade+0x6d0/0x6d0 [ 3015.665065] ? find_held_lock+0x2c/0x110 [ 3015.665535] ? __fget_files+0x2f8/0x520 [ 3015.665998] ? __fget_light+0xea/0x290 [ 3015.666445] __sys_sendmsg+0xe5/0x1b0 [ 3015.666876] ? __sys_sendmsg_sock+0x40/0x40 [ 3015.667367] ? rcu_read_lock_any_held+0x75/0xa0 [ 3015.667906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3015.668505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3015.669096] ? trace_hardirqs_on+0x5b/0x180 [ 3015.669588] do_syscall_64+0x33/0x40 [ 3015.670017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3015.670602] RIP: 0033:0x7fd129b8bb19 [ 3015.671026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3015.673127] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3015.673997] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 3015.674811] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 3015.675626] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 3015.676440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3015.677254] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 3015.679937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 3015.688330] loop1: detected capacity change from 0 to 1536 [ 3015.715205] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:01:06 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) dup3(r3, r5, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000000)={0x2, 0x8001, 0x8001}) r6 = socket$netlink(0x10, 0x3, 0x0) fcntl$notify(r4, 0x402, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r2}}) 01:01:06 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 01:01:06 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0)={0x0, 0x10000}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0xf6, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 01:01:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 13) 01:01:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001100215f0000000070e600000a"], 0x24}}, 0x0) 01:01:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000fffffffe0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 01:01:06 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 88) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) r7 = syz_open_procfs(0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 3029.258898] FAULT_INJECTION: forcing a failure. [ 3029.258898] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.260799] CPU: 1 PID: 16486 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3029.261821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.263911] Call Trace: [ 3029.264593] dump_stack+0x107/0x167 [ 3029.265531] should_fail.cold+0x5/0xa [ 3029.266533] ? __alloc_skb+0x6d/0x5b0 [ 3029.267509] should_failslab+0x5/0x20 [ 3029.268493] kmem_cache_alloc_node+0x55/0x330 [ 3029.269653] __alloc_skb+0x6d/0x5b0 [ 3029.270619] alloc_skb_with_frags+0x92/0x570 [ 3029.271760] sock_alloc_send_pskb+0x7af/0x930 [ 3029.272922] ? sk_alloc+0x350/0x350 [ 3029.273877] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3029.275237] ? lock_chain_count+0x20/0x20 [ 3029.276301] ? lock_chain_count+0x20/0x20 [ 3029.277375] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 3029.278705] ? ip_frag_init+0x350/0x350 [ 3029.279744] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 3029.280979] ? ip6_mtu+0x1e9/0x3d0 [ 3029.281897] ? ip6_setup_cork+0xfb7/0x1740 [ 3029.282996] ip6_make_skb+0x2df/0x4e0 [ 3029.283983] ? ip_frag_init+0x350/0x350 [ 3029.285011] ? ip_frag_init+0x350/0x350 [ 3029.286053] ? ip6_push_pending_frames+0xf0/0xf0 [ 3029.287276] ? ip6_dst_hoplimit+0x199/0x440 [ 3029.287300] ? lock_downgrade+0x6d0/0x6d0 [ 3029.287341] udpv6_sendmsg+0x2128/0x2b40 [ 3029.289912] ? ip_frag_init+0x350/0x350 [ 3029.290976] ? udp_v6_push_pending_frames+0x360/0x360 [ 3029.292316] ? perf_event_task_disable+0x390/0x390 [ 3029.293585] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 3029.294850] ? lock_acquire+0x197/0x470 [ 3029.295877] ? find_held_lock+0x2c/0x110 [ 3029.296944] ? sock_has_perm+0x1ea/0x280 [ 3029.298034] ? __import_iovec+0x458/0x590 [ 3029.299106] ? udp_v6_push_pending_frames+0x360/0x360 [ 3029.300438] inet6_sendmsg+0x105/0x140 [ 3029.301445] ? inet6_compat_ioctl+0x320/0x320 [ 3029.302616] __sock_sendmsg+0xf2/0x190 [ 3029.303631] ____sys_sendmsg+0x334/0x870 [ 3029.304685] ? sock_write_iter+0x3d0/0x3d0 [ 3029.305772] ? do_recvmmsg+0x6d0/0x6d0 [ 3029.306789] ? __lock_acquire+0x1657/0x5b00 [ 3029.307918] ___sys_sendmsg+0xf3/0x170 [ 3029.309158] ? sendmsg_copy_msghdr+0x160/0x160 [ 3029.310714] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3029.312212] ? _raw_spin_unlock_irq+0x27/0x30 [ 3029.313730] ? lock_acquire+0x197/0x470 [ 3029.315031] ? find_held_lock+0x2c/0x110 [ 3029.316252] ? __might_fault+0xd3/0x180 [ 3029.317395] ? lock_downgrade+0x6d0/0x6d0 [ 3029.318403] __sys_sendmmsg+0x195/0x470 [ 3029.319339] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3029.320365] ? lock_downgrade+0x6d0/0x6d0 [ 3029.321355] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3029.322498] ? wait_for_completion_io+0x270/0x270 [ 3029.323631] ? rcu_read_lock_any_held+0x75/0xa0 [ 3029.324733] ? vfs_write+0x354/0xb10 [ 3029.325608] ? fput_many+0x2f/0x1a0 [ 3029.326479] ? ksys_write+0x1a9/0x260 [ 3029.327382] ? __ia32_sys_read+0xb0/0xb0 [ 3029.328355] __x64_sys_sendmmsg+0x99/0x100 [ 3029.329347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3029.330561] do_syscall_64+0x33/0x40 [ 3029.331435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3029.332640] RIP: 0033:0x7fb085b27b19 [ 3029.333517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.335757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16500 comm=syz-executor.2 [ 3029.338097] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3029.338123] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 3029.338139] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 3029.344195] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.345762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3029.345774] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 3029.362981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:01:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 3029.368550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3029.369653] FAULT_INJECTION: forcing a failure. [ 3029.369653] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.371028] CPU: 0 PID: 16502 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 3029.371823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.372780] Call Trace: [ 3029.373093] dump_stack+0x107/0x167 [ 3029.373513] should_fail.cold+0x5/0xa [ 3029.373969] ? create_object.isra.0+0x3a/0xa30 [ 3029.374501] should_failslab+0x5/0x20 [ 3029.374939] kmem_cache_alloc+0x5b/0x310 [ 3029.375410] create_object.isra.0+0x3a/0xa30 [ 3029.375920] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3029.376509] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3029.377090] ? netlink_ack+0x1ed/0xab0 [ 3029.377545] __alloc_skb+0xb1/0x5b0 [ 3029.377978] netlink_ack+0x1ed/0xab0 [ 3029.378419] ? netlink_sendmsg+0xe00/0xe00 [ 3029.378912] ? lock_acquire+0x197/0x470 [ 3029.379370] ? netlink_deliver_tap+0xf4/0xcc0 [ 3029.379888] netlink_rcv_skb+0x348/0x430 [ 3029.380356] ? rtnl_getlink+0xaa0/0xaa0 [ 3029.380817] ? netlink_ack+0xab0/0xab0 [ 3029.381267] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3029.381794] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3029.382339] ? is_vmalloc_addr+0x7b/0xb0 [ 3029.382809] netlink_unicast+0x6ce/0xa00 [ 3029.383287] ? netlink_attachskb+0xab0/0xab0 [ 3029.383801] netlink_sendmsg+0x90f/0xe00 [ 3029.384274] ? netlink_unicast+0xa00/0xa00 [ 3029.384768] ? netlink_unicast+0xa00/0xa00 [ 3029.385257] __sock_sendmsg+0x154/0x190 [ 3029.385717] ____sys_sendmsg+0x70d/0x870 [ 3029.386210] ? sock_write_iter+0x3d0/0x3d0 [ 3029.386696] ? do_recvmmsg+0x6d0/0x6d0 [ 3029.387148] ? lock_downgrade+0x6d0/0x6d0 [ 3029.387626] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3029.388227] ___sys_sendmsg+0xf3/0x170 [ 3029.388675] ? sendmsg_copy_msghdr+0x160/0x160 [ 3029.389209] ? __fget_files+0x2cf/0x520 [ 3029.389668] ? lock_downgrade+0x6d0/0x6d0 [ 3029.390167] ? find_held_lock+0x2c/0x110 [ 3029.390640] ? __fget_files+0x2f8/0x520 [ 3029.391100] ? __fget_light+0xea/0x290 [ 3029.391547] __sys_sendmsg+0xe5/0x1b0 [ 3029.391987] ? __sys_sendmsg_sock+0x40/0x40 [ 3029.392485] ? rcu_read_lock_any_held+0x75/0xa0 [ 3029.393030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3029.393642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3029.394255] ? trace_hardirqs_on+0x5b/0x180 [ 3029.394752] do_syscall_64+0x33/0x40 [ 3029.395184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3029.395774] RIP: 0033:0x7fd129b8bb19 [ 3029.396204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.398357] RSP: 002b:00007fd127101188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3029.399236] RAX: ffffffffffffffda RBX: 00007fd129c9ef60 RCX: 00007fd129b8bb19 [ 3029.400065] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 3029.400898] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.401809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3029.402694] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 3029.404405] loop1: detected capacity change from 0 to 1536 [ 3029.410130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 3029.412080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 3029.413460] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:01:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002500215f0000000070e600000a"], 0x24}}, 0x0) 01:01:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000effdffff0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) 01:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 3029.496018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16516 comm=syz-executor.2 [ 3029.524748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:01:06 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 89) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:01:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000fcfdffff0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3029.552367] FAULT_INJECTION: forcing a failure. [ 3029.552367] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.553716] CPU: 0 PID: 16521 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3029.554526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.555480] Call Trace: [ 3029.555791] dump_stack+0x107/0x167 [ 3029.556219] should_fail.cold+0x5/0xa [ 3029.556662] ? __alloc_skb+0x6d/0x5b0 [ 3029.557103] should_failslab+0x5/0x20 [ 3029.557546] kmem_cache_alloc_node+0x55/0x330 [ 3029.558078] ? fib6_table_lookup+0x636/0xaf0 [ 3029.558590] __alloc_skb+0x6d/0x5b0 [ 3029.559015] alloc_skb_with_frags+0x92/0x570 [ 3029.559532] ? mark_lock+0xf5/0x2df0 [ 3029.559960] ? mark_lock+0xf5/0x2df0 [ 3029.560389] sock_alloc_send_pskb+0x7af/0x930 [ 3029.560913] ? sk_alloc+0x350/0x350 [ 3029.561333] ? find_held_lock+0x2c/0x110 [ 3029.561800] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3029.562430] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 3029.563015] ? rawv6_exit+0x20/0x20 [ 3029.563439] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 3029.563994] ? ip6_mtu+0x1e9/0x3d0 [ 3029.564403] ? ip6_setup_cork+0xfb7/0x1740 [ 3029.564895] ip6_append_data+0x1e6/0x330 [ 3029.565362] ? rawv6_exit+0x20/0x20 [ 3029.565782] ? rawv6_exit+0x20/0x20 [ 3029.566222] icmp6_send+0x1250/0x1f30 [ 3029.566675] ? icmpv6_push_pending_frames+0x470/0x470 [ 3029.567266] ? find_held_lock+0x2c/0x110 [ 3029.567751] ? ip6_dst_hoplimit+0x440/0x440 [ 3029.568257] ip6_pkt_drop+0x3d2/0x7f0 [ 3029.568698] ? ip6_pkt_discard+0x20/0x20 [ 3029.569167] ip6_local_out+0x29f/0x4c0 [ 3029.569616] ip6_send_skb+0x117/0x460 [ 3029.570080] udp_v6_send_skb+0x7b7/0x1620 [ 3029.570563] udpv6_sendmsg+0x216b/0x2b40 [ 3029.571033] ? ip_frag_init+0x350/0x350 [ 3029.571492] ? udp_v6_push_pending_frames+0x360/0x360 [ 3029.572092] ? perf_event_task_disable+0x390/0x390 [ 3029.572661] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 3029.573222] ? lock_acquire+0x197/0x470 [ 3029.573677] ? find_held_lock+0x2c/0x110 [ 3029.574168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3029.574771] ? sock_has_perm+0x1ea/0x280 [ 3029.575252] ? __import_iovec+0x458/0x590 [ 3029.575733] ? udp_v6_push_pending_frames+0x360/0x360 [ 3029.576325] inet6_sendmsg+0x105/0x140 [ 3029.576771] ? inet6_compat_ioctl+0x320/0x320 [ 3029.577290] __sock_sendmsg+0xf2/0x190 [ 3029.577740] ____sys_sendmsg+0x334/0x870 [ 3029.578233] ? sock_write_iter+0x3d0/0x3d0 [ 3029.578711] ? do_recvmmsg+0x6d0/0x6d0 [ 3029.579161] ? __lock_acquire+0x1657/0x5b00 [ 3029.579662] ___sys_sendmsg+0xf3/0x170 [ 3029.580112] ? sendmsg_copy_msghdr+0x160/0x160 [ 3029.580632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3029.581232] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3029.581749] ? trace_hardirqs_on+0x5b/0x180 [ 3029.582268] ? lock_acquire+0x197/0x470 [ 3029.582724] ? find_held_lock+0x2c/0x110 [ 3029.583192] ? __might_fault+0xd3/0x180 [ 3029.583652] ? lock_downgrade+0x6d0/0x6d0 [ 3029.584138] __sys_sendmmsg+0x195/0x470 [ 3029.584595] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3029.585091] ? lock_downgrade+0x6d0/0x6d0 [ 3029.585579] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3029.586155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3029.586759] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3029.587376] ? trace_hardirqs_on+0x5b/0x180 [ 3029.587874] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3029.588519] __x64_sys_sendmmsg+0x99/0x100 [ 3029.589006] do_syscall_64+0x33/0x40 [ 3029.589432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3029.590035] RIP: 0033:0x7fb085b27b19 [ 3029.590462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.592573] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 01:01:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000fdfdffff0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3029.593454] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 3029.594444] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 3029.595259] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.596082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3029.596897] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 01:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) [ 3029.637980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16527 comm=syz-executor.2 [ 3029.723892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:01:20 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000005f00215f0000000070e600000a"], 0x24}}, 0x0) 01:01:20 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0x21) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x18084}, 0x40000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r6 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r6, 0x0, r6) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4080000) 01:01:20 executing program 3: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) socketpair(0x21, 0x2, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}, 0xffffffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat(0xffffffffffffffff, 0x0, 0x0, 0x15f) 01:01:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250b000800031e00"/26, @ANYRES32=0x0, @ANYBLOB="08043100ff7f000005002a0000fce187f5ced0b04f9ecc196f4a23b40000000800340008004c5778262f000100000005002f0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) faccessat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x189, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="204000001800210c000000000053eb00020000000c00080034b5f857f63f67b8b5c90000020001000004770f053b80c143c7b0ac736856d9a8a556f3ef09c029baf654cfff60f4fff2f80204b68f81e18ae5c92b0c8c2e065ce37243689c00000000fafb0d6f2493aeb20b0a28ff9f7cb03692a29e5f7249b89ba20811381e8e62eb5b7f906a5e60c25de5a760b84d88bded0779c8e814c4b967fe1f60bc31a19adac5f2ff56c8ee05fd719cbda2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="050007000000000005000800e1"], 0x2c}}, 0x4000890) syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2040000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) 01:01:20 executing program 4: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) (fail_nth: 90) socketpair(0x21, 0x2, 0x7, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000040)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000240)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0xffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:01:20 executing program 5: r0 = syz_io_uring_setup(0x3a88, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8000) syz_io_uring_setup(0x865, &(0x7f0000000340)={0x0, 0x44b5, 0x1, 0x2, 0x2c7, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000003c0)) signalfd(r3, &(0x7f0000000400)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 01:01:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) (fail_nth: 14) [ 3043.714952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 01:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f80000200040000300008cffffff0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3043.724149] FAULT_INJECTION: forcing a failure. [ 3043.724149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3043.725602] CPU: 1 PID: 16537 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 3043.726458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3043.727468] Call Trace: [ 3043.727796] dump_stack+0x107/0x167 [ 3043.728249] should_fail.cold+0x5/0xa [ 3043.728718] _copy_to_user+0x2e/0x180 [ 3043.729185] simple_read_from_buffer+0xcc/0x160 [ 3043.729754] proc_fail_nth_read+0x198/0x230 [ 3043.730284] ? proc_sessionid_read+0x230/0x230 [ 3043.730836] ? security_file_permission+0xb1/0xe0 [ 3043.731425] ? proc_sessionid_read+0x230/0x230 [ 3043.731979] vfs_read+0x228/0x620 [ 3043.732404] ksys_read+0x12d/0x260 [ 3043.732838] ? vfs_write+0xb10/0xb10 [ 3043.733292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3043.733928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3043.734560] do_syscall_64+0x33/0x40 [ 3043.735011] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3043.735629] RIP: 0033:0x7fd129b3e69c [ 3043.736080] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3043.738309] RSP: 002b:00007fd127101170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3043.739228] RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 00007fd129b3e69c [ 3043.740090] RDX: 000000000000000f RSI: 00007fd1271011e0 RDI: 0000000000000005 [ 3043.740961] RBP: 00007fd1271011d0 R08: 0000000000000000 R09: 0000000000000000 [ 3043.741819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3043.742707] R13: 00007ffee260556f R14: 00007fd127101300 R15: 0000000000022000 [ 3043.747888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=16547 comm=syz-executor.6 [ 3043.751804] loop1: detected capacity change from 0 to 1536 [ 3043.756477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=16550 comm=syz-executor.6 [ 3043.758543] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3043.762494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16548 comm=syz-executor.2 01:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000f6ffffff0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3043.812797] FAULT_INJECTION: forcing a failure. [ 3043.812797] name failslab, interval 1, probability 0, space 0, times 0 [ 3043.815317] CPU: 0 PID: 16545 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3043.816799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3043.818587] Call Trace: [ 3043.819174] dump_stack+0x107/0x167 [ 3043.819605] loop1: detected capacity change from 0 to 1536 [ 3043.819949] should_fail.cold+0x5/0xa [ 3043.821448] ? create_object.isra.0+0x3a/0xa30 [ 3043.822445] should_failslab+0x5/0x20 [ 3043.823276] kmem_cache_alloc+0x5b/0x310 01:01:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800215f0000000070e600000a"], 0x24}}, 0x0) [ 3043.824162] create_object.isra.0+0x3a/0xa30 [ 3043.825364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3043.826462] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3043.827777] ? alloc_skb_with_frags+0x92/0x570 [ 3043.828966] __alloc_skb+0xb1/0x5b0 [ 3043.829916] alloc_skb_with_frags+0x92/0x570 [ 3043.831079] sock_alloc_send_pskb+0x7af/0x930 [ 3043.832010] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3043.832243] ? sk_alloc+0x350/0x350 [ 3043.834125] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3043.835480] ? lock_chain_count+0x20/0x20 [ 3043.836555] ? lock_chain_count+0x20/0x20 [ 3043.837631] __ip6_append_data.isra.0+0x1cd4/0x3b90 [ 3043.838934] ? ip_frag_init+0x350/0x350 [ 3043.839957] ? ip6_sk_dst_lookup_flow+0x6f0/0x6f0 [ 3043.841196] ? ip6_mtu+0x1e9/0x3d0 [ 3043.842115] ? ip6_setup_cork+0xfb7/0x1740 [ 3043.843215] ip6_make_skb+0x2df/0x4e0 [ 3043.844206] ? ip_frag_init+0x350/0x350 [ 3043.845244] ? ip_frag_init+0x350/0x350 [ 3043.846301] ? ip6_push_pending_frames+0xf0/0xf0 [ 3043.847519] ? ip6_dst_hoplimit+0x199/0x440 [ 3043.848624] ? lock_downgrade+0x6d0/0x6d0 [ 3043.849712] udpv6_sendmsg+0x2128/0x2b40 [ 3043.850771] ? ip_frag_init+0x350/0x350 [ 3043.851802] ? udp_v6_push_pending_frames+0x360/0x360 01:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000feffffff0001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3043.853136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3043.854545] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3043.855686] ? lock_acquire+0x197/0x470 [ 3043.856494] ? find_held_lock+0x2c/0x110 [ 3043.857327] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3043.858437] ? sock_has_perm+0x1ea/0x280 [ 3043.859288] ? __import_iovec+0x458/0x590 [ 3043.860136] ? udp_v6_push_pending_frames+0x360/0x360 [ 3043.861180] inet6_sendmsg+0x105/0x140 [ 3043.861975] ? inet6_compat_ioctl+0x320/0x320 [ 3043.862893] __sock_sendmsg+0xf2/0x190 [ 3043.863689] ____sys_sendmsg+0x334/0x870 [ 3043.864519] ? sock_write_iter+0x3d0/0x3d0 [ 3043.865385] ? do_recvmmsg+0x6d0/0x6d0 [ 3043.866211] ? __lock_acquire+0x1657/0x5b00 [ 3043.867108] ___sys_sendmsg+0xf3/0x170 [ 3043.867898] ? sendmsg_copy_msghdr+0x160/0x160 [ 3043.868816] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3043.869720] ? _raw_spin_unlock_irq+0x27/0x30 [ 3043.870646] ? lock_acquire+0x197/0x470 [ 3043.871452] ? find_held_lock+0x2c/0x110 [ 3043.872270] ? __might_fault+0xd3/0x180 [ 3043.873085] ? lock_downgrade+0x6d0/0x6d0 [ 3043.873942] __sys_sendmmsg+0x195/0x470 [ 3043.874750] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3043.875625] ? lock_downgrade+0x6d0/0x6d0 [ 3043.876471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3043.877455] ? wait_for_completion_io+0x270/0x270 [ 3043.878438] ? rcu_read_lock_any_held+0x75/0xa0 [ 3043.879420] ? vfs_write+0x354/0xb10 [ 3043.880167] ? fput_many+0x2f/0x1a0 [ 3043.880892] ? ksys_write+0x1a9/0x260 [ 3043.881661] ? __ia32_sys_read+0xb0/0xb0 [ 3043.882483] __x64_sys_sendmmsg+0x99/0x100 [ 3043.883335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3043.884375] do_syscall_64+0x33/0x40 [ 3043.885134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3043.886183] RIP: 0033:0x7fb085b27b19 [ 3043.886947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3043.890812] RSP: 002b:00007fb08309d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3043.892404] RAX: ffffffffffffffda RBX: 00007fb085c3af60 RCX: 00007fb085b27b19 [ 3043.893895] RDX: 0400000000000095 RSI: 0000000020004d00 RDI: 0000000000000007 [ 3043.895386] RBP: 00007fb08309d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3043.896876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3043.898388] R13: 00007ffdc58c626f R14: 00007fb08309d300 R15: 0000000000022000 [ 3043.914038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3043.916831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16562 comm=syz-executor.7 [ 3043.935223] loop1: detected capacity change from 0 to 1536 [ 3043.938367] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3043.944443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000400008000f8000020004000030000000200000001", 0x25}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)={[{@uni_xlateno}]}) [ 3043.984781] loop1: detected capacity change from 0 to 1536 [ 3043.990862] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 3044.654060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16562 comm=syz-executor.7 VM DIAGNOSIS: 01:06:24 Registers: info registers vcpu 0 RAX=ffffffff83e9c9b0 RBX=0000000000000000 RCX=ffffffff83e8461c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9d178 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8567ac88 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9c9be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563845804678 CR3=000000000cb56000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004161166600000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=ffffffff850a8280 RCX=ffff88806cf09a30 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff850a8284 RBP=ffffffff850a8280 RSP=ffff88806cf09a88 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000a20 R13=0000000000000a20 R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff812807dc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa961777010 CR3=000000000cb56000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=007002fe016c6c6f502e726567616e61 XMM02=000000000000000040f5de0000000000 XMM03=00000606020143df447bfcf14ebd8afc XMM04=6578650a00736465657320636578650a XMM05=6f74756365786511006c61746f742063 XMM06=63657865090073747261747365722072 XMM07=6169727420636578650b007a7a756620 XMM08=69646e616320636578650e006e656720 XMM09=736465657320636578650a0065746164 XMM10=786511006c61746f7420636578650a00 XMM11=00737472617473657220726f74756365 XMM12=636578650b007a7a7566206365786509 XMM13=696d20636578650d0065676169727420 XMM14=616d7320636578650a00657a696d696e XMM15=000073746e696820636578650a006873