ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) 14:24:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d6", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2107.892772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10169 comm=syz-executor.5 [ 2107.896009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10176 comm=syz-executor.2 [ 2107.905189] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 2107.912108] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:24:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) 14:24:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', 0x0, 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:44 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:24:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2108.120172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10187 comm=syz-executor.6 14:24:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b", 0x7d}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2108.135751] netlink: 'syz-executor.6': attribute type 11 has an invalid length. 14:24:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', 0x0, 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d584", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x406, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) 14:24:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r3, 0x9) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) [ 2108.385202] netlink: 'syz-executor.6': attribute type 11 has an invalid length. [ 2108.428027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10201 comm=syz-executor.5 [ 2108.438074] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 14:24:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:58 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, 0x0) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:24:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r3, 0x9) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) 14:24:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:58 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:58 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x7, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:24:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2122.020366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10220 comm=syz-executor.6 [ 2122.022328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10218 comm=syz-executor.5 [ 2122.042365] netlink: 'syz-executor.5': attribute type 11 has an invalid length. mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', 0x0, 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) 14:24:58 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:58 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x7, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:24:58 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:24:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, 0x0) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:25:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x7, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0x4077, 0x8000) 14:25:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(0xffffffffffffffff, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3, 0x4077, 0x8000) 14:25:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {0x0}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:25:12 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:25:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r3, 0x9) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) 14:25:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r3, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) 14:25:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:26 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r2, @ANYRESHEX=r1]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2149.749223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10286 comm=syz-executor.2 syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {0x0}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:26 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 2149.752642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10280 comm=syz-executor.5 [ 2149.772148] netlink: 'syz-executor.5': attribute type 11 has an invalid length. 14:25:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:26 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:37 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) fallocate(r3, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:25:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r3, 0x9) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) 14:25:37 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:25:37 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {0x0}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2161.205621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10307 comm=syz-executor.3 [ 2161.218779] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2161.231964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10319 comm=syz-executor.2 14:25:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r3, 0x9) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) 14:25:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:37 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) fallocate(r3, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 2161.255044] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:25:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:37 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:25:37 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r3, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) 14:25:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:51 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r3, 0x9) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) [ 2175.600774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10342 comm=syz-executor.2 [ 2175.639313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10353 comm=syz-executor.5 [ 2175.642765] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:25:51 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:25:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r3, 0x9) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) [ 2175.655639] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 2175.667206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10350 comm=syz-executor.3 [ 2175.680532] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 14:25:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, 0x0, 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:52 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) 14:25:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2175.935165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10368 comm=syz-executor.3 [ 2175.954219] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 14:25:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, 0x0, 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:52 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) readv(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/158, 0x9e}], 0x3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x2, 0x0, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="7e65896a6b4f7371946a3cf66b00946eab7f59e37dc39b78cfc5d0aaa8303d10c2543d6da2d5f063f6f44a4640bac2514dbea765cda2ed3229e5035311283f64cdb54fc50737b9aa1581a6ea428da591c117c837d5a271479a8a38573678678733998cc36e24e6a81f6bdf2254470a59f51e2e795d020be1256845d0b8cded765dc2c146516227e7bac3fb5f22d739d302339360abaef752fd951f75a144ba49259fe834c7ebeaac83004013cbd635a2b9238762863ca2cd098614", 0xbb, r2) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000340)='user\x00', &(0x7f0000000380)='[\x00') add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r7) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) close_range(r0, r1, 0x0) 14:25:52 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) readv(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/158, 0x9e}], 0x3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x2, 0x0, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="7e65896a6b4f7371946a3cf66b00946eab7f59e37dc39b78cfc5d0aaa8303d10c2543d6da2d5f063f6f44a4640bac2514dbea765cda2ed3229e5035311283f64cdb54fc50737b9aa1581a6ea428da591c117c837d5a271479a8a38573678678733998cc36e24e6a81f6bdf2254470a59f51e2e795d020be1256845d0b8cded765dc2c146516227e7bac3fb5f22d739d302339360abaef752fd951f75a144ba49259fe834c7ebeaac83004013cbd635a2b9238762863ca2cd098614", 0xbb, r2) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000340)='user\x00', &(0x7f0000000380)='[\x00') add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r7) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) close_range(r0, r1, 0x0) 14:25:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:25:52 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b90845", 0x7}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:25:52 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:25:52 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) readv(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/158, 0x9e}], 0x3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x2, 0x0, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="7e65896a6b4f7371946a3cf66b00946eab7f59e37dc39b78cfc5d0aaa8303d10c2543d6da2d5f063f6f44a4640bac2514dbea765cda2ed3229e5035311283f64cdb54fc50737b9aa1581a6ea428da591c117c837d5a271479a8a38573678678733998cc36e24e6a81f6bdf2254470a59f51e2e795d020be1256845d0b8cded765dc2c146516227e7bac3fb5f22d739d302339360abaef752fd951f75a144ba49259fe834c7ebeaac83004013cbd635a2b9238762863ca2cd098614", 0xbb, r2) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000340)='user\x00', &(0x7f0000000380)='[\x00') add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r7) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) close_range(r0, r1, 0x0) 14:26:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:06 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:26:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x4077, 0x8000) 14:26:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 1) 14:26:06 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) readv(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/158, 0x9e}], 0x3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x2, 0x0, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="7e65896a6b4f7371946a3cf66b00946eab7f59e37dc39b78cfc5d0aaa8303d10c2543d6da2d5f063f6f44a4640bac2514dbea765cda2ed3229e5035311283f64cdb54fc50737b9aa1581a6ea428da591c117c837d5a271479a8a38573678678733998cc36e24e6a81f6bdf2254470a59f51e2e795d020be1256845d0b8cded765dc2c146516227e7bac3fb5f22d739d302339360abaef752fd951f75a144ba49259fe834c7ebeaac83004013cbd635a2b9238762863ca2cd098614", 0xbb, r2) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000340)='user\x00', &(0x7f0000000380)='[\x00') add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r7) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) close_range(r0, r1, 0x0) 14:26:06 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b90845", 0x7}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:06 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) readv(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/158, 0x9e}], 0x3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x2, 0x0, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="7e65896a6b4f7371946a3cf66b00946eab7f59e37dc39b78cfc5d0aaa8303d10c2543d6da2d5f063f6f44a4640bac2514dbea765cda2ed3229e5035311283f64cdb54fc50737b9aa1581a6ea428da591c117c837d5a271479a8a38573678678733998cc36e24e6a81f6bdf2254470a59f51e2e795d020be1256845d0b8cded765dc2c146516227e7bac3fb5f22d739d302339360abaef752fd951f75a144ba49259fe834c7ebeaac83004013cbd635a2b9238762863ca2cd098614", 0xbb, r2) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000340)='user\x00', &(0x7f0000000380)='[\x00') add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r7) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) close_range(r0, r1, 0x0) 14:26:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, 0x0, 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2190.575517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=10399 comm=syz-executor.2 [ 2190.604923] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2190.619367] FAULT_INJECTION: forcing a failure. [ 2190.619367] name failslab, interval 1, probability 0, space 0, times 1 [ 2190.621908] CPU: 1 PID: 10407 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2190.623309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.624918] Call Trace: [ 2190.625475] dump_stack+0x107/0x167 [ 2190.626183] should_fail.cold+0x5/0xa [ 2190.626978] ? getname_flags.part.0+0x50/0x4f0 [ 2190.627889] should_failslab+0x5/0x20 [ 2190.628623] kmem_cache_alloc+0x5b/0x310 [ 2190.629443] getname_flags.part.0+0x50/0x4f0 [ 2190.630319] getname_flags+0x9a/0xe0 [ 2190.631060] do_mkdirat+0x8f/0x2b0 [ 2190.631788] ? user_path_create+0xf0/0xf0 [ 2190.632618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.633662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.634684] do_syscall_64+0x33/0x40 [ 2190.635427] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2190.636450] RIP: 0033:0x7f66172e4b19 [ 2190.637186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.640792] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2190.642283] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2190.643698] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2190.645093] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.646492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2190.647902] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:26:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:07 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b90845", 0x7}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, 0x0, 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:07 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef", 0xa}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 2) 14:26:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2190.927211] FAULT_INJECTION: forcing a failure. [ 2190.927211] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.928794] CPU: 1 PID: 10428 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2190.929639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.930713] Call Trace: [ 2190.931066] dump_stack+0x107/0x167 [ 2190.931545] should_fail.cold+0x5/0xa [ 2190.932071] ? create_object.isra.0+0x3a/0xa20 [ 2190.932682] should_failslab+0x5/0x20 [ 2190.933185] kmem_cache_alloc+0x5b/0x310 [ 2190.933722] ? ksys_write+0x21a/0x260 [ 2190.934227] create_object.isra.0+0x3a/0xa20 [ 2190.934799] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.935465] kmem_cache_alloc+0x159/0x310 [ 2190.936001] getname_flags.part.0+0x50/0x4f0 [ 2190.936537] getname_flags+0x9a/0xe0 [ 2190.936994] do_mkdirat+0x8f/0x2b0 [ 2190.937445] ? user_path_create+0xf0/0xf0 [ 2190.937962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.938646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.939318] do_syscall_64+0x33/0x40 [ 2190.939804] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2190.940462] RIP: 0033:0x7f66172e4b19 [ 2190.940931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.943317] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2190.944319] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2190.945238] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2190.946105] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.946984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2190.947897] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:26:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 2203.405536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10443 comm=syz-executor.5 [ 2203.414289] FAULT_INJECTION: forcing a failure. [ 2203.414289] name failslab, interval 1, probability 0, space 0, times 0 [ 2203.416190] CPU: 1 PID: 10443 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2203.417077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2203.418023] Call Trace: [ 2203.418329] dump_stack+0x107/0x167 [ 2203.418771] should_fail.cold+0x5/0xa [ 2203.419257] ? ext4_init_io_end+0x23/0x180 [ 2203.419817] should_failslab+0x5/0x20 [ 2203.420315] kmem_cache_alloc+0x5b/0x310 [ 2203.420848] ext4_init_io_end+0x23/0x180 [ 2203.421374] ext4_writepages+0x8ec/0x3350 [ 2203.421917] ? lock_acquire+0x197/0x470 [ 2203.422429] ? lock_downgrade+0x6d0/0x6d0 [ 2203.422945] ? mark_lock+0xf5/0x2df0 [ 2203.423431] ? mark_lock+0xf5/0x2df0 [ 2203.423905] ? lock_chain_count+0x20/0x20 [ 2203.424421] ? lock_chain_count+0x20/0x20 [ 2203.424930] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2203.425523] ? mark_lock+0xf5/0x2df0 [ 2203.425936] ? lock_chain_count+0x20/0x20 [ 2203.426441] ? __lock_acquire+0x1657/0x5b00 [ 2203.426972] ? lock_chain_count+0x20/0x20 [ 2203.427486] ? __lock_acquire+0x1657/0x5b00 [ 2203.428022] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2203.428619] do_writepages+0xee/0x2a0 [ 2203.429086] ? page_writeback_cpu_online+0x20/0x20 [ 2203.429680] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2203.430318] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2203.430925] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2203.431575] ? ext4_fallocate+0x18d/0x3860 [ 2203.432144] filemap_write_and_wait_range+0x65/0x100 [ 2203.432762] ext4_punch_hole+0x178/0x1070 [ 2203.433327] ? downgrade_write+0x3a0/0x3a0 [ 2203.433842] ? down_write_killable+0x180/0x180 [ 2203.434404] ext4_fallocate+0xd8e/0x3860 [ 2203.434912] ? __x64_sys_fallocate+0xcf/0x140 [ 2203.435465] ? lock_release+0x680/0x680 [ 2203.435956] ? _cond_resched+0x12/0x80 [ 2203.436390] ? ext4_ext_truncate+0x250/0x250 [ 2203.436926] ? ext4_ext_truncate+0x250/0x250 [ 2203.437464] vfs_fallocate+0x48f/0xd00 [ 2203.437945] __x64_sys_fallocate+0xcf/0x140 [ 2203.438470] do_syscall_64+0x33/0x40 [ 2203.438916] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2203.439535] RIP: 0033:0x7f5d3b9e6b19 [ 2203.440012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2203.442293] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2203.443217] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2203.443998] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2203.444873] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2203.445650] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.446525] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2203.446865] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:26:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 1) 14:26:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef", 0xa}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 1) 14:26:19 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:26:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 3) [ 2203.470259] FAULT_INJECTION: forcing a failure. [ 2203.470259] name failslab, interval 1, probability 0, space 0, times 0 [ 2203.473123] CPU: 0 PID: 10452 Comm: syz-executor.6 Not tainted 5.10.192 #1 [ 2203.474520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2203.476195] Call Trace: [ 2203.476735] dump_stack+0x107/0x167 [ 2203.477487] should_fail.cold+0x5/0xa [ 2203.478282] should_failslab+0x5/0x20 [ 2203.479067] kmem_cache_alloc_bulk+0x4b/0x320 [ 2203.480004] io_submit_sqes+0x6f76/0x85c0 [ 2203.480858] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2203.481848] ? __do_sys_io_uring_enter+0x6b5/0x18a0 [ 2203.482846] __do_sys_io_uring_enter+0x6b5/0x18a0 [ 2203.483843] ? lock_downgrade+0x6d0/0x6d0 [ 2203.484673] ? find_held_lock+0x2c/0x110 [ 2203.485493] ? io_submit_sqes+0x85c0/0x85c0 [ 2203.486365] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2203.487335] ? wait_for_completion_io+0x270/0x270 [ 2203.488317] ? rcu_read_lock_any_held+0x75/0xa0 [ 2203.489252] ? vfs_write+0x354/0xa70 [ 2203.490000] ? fput_many+0x2f/0x1a0 [ 2203.490735] ? ksys_write+0x1a9/0x260 [ 2203.491504] ? __ia32_sys_read+0xb0/0xb0 [ 2203.492334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2203.493391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2203.494430] do_syscall_64+0x33/0x40 [ 2203.495174] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2203.496228] RIP: 0033:0x7fc3488c6b19 [ 2203.496979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2203.500648] RSP: 002b:00007fc345e3c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2203.502179] RAX: ffffffffffffffda RBX: 00007fc3489d9f60 RCX: 00007fc3488c6b19 [ 2203.503604] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2203.505047] RBP: 00007fc345e3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2203.506476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.507914] R13: 00007ffc2c5547af R14: 00007fc345e3c300 R15: 0000000000022000 [ 2203.516952] FAULT_INJECTION: forcing a failure. [ 2203.516952] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2203.518683] CPU: 1 PID: 10444 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2203.519194] FAULT_INJECTION: forcing a failure. [ 2203.519194] name failslab, interval 1, probability 0, space 0, times 0 [ 2203.519419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2203.519422] Call Trace: [ 2203.519438] dump_stack+0x107/0x167 [ 2203.519452] should_fail.cold+0x5/0xa 14:26:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2203.519470] strncpy_from_user+0x34/0x470 [ 2203.519489] getname_flags.part.0+0x95/0x4f0 [ 2203.519500] getname_flags+0x9a/0xe0 [ 2203.519514] do_mkdirat+0x8f/0x2b0 [ 2203.519529] ? user_path_create+0xf0/0xf0 [ 2203.519542] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2203.519552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2203.519564] do_syscall_64+0x33/0x40 [ 2203.519574] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2203.519580] RIP: 0033:0x7f66172e4b19 [ 2203.519590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2203.519595] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2203.519606] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2203.519611] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2203.519617] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2203.519622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.519627] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2203.549939] CPU: 0 PID: 10453 Comm: syz-executor.2 Not tainted 5.10.192 #1 [ 2203.551322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2203.552996] Call Trace: [ 2203.553542] dump_stack+0x107/0x167 [ 2203.554279] should_fail.cold+0x5/0xa [ 2203.555041] ? ext4_init_io_end+0x23/0x180 [ 2203.555906] should_failslab+0x5/0x20 [ 2203.556671] kmem_cache_alloc+0x5b/0x310 [ 2203.557489] ext4_init_io_end+0x23/0x180 [ 2203.558305] ext4_writepages+0x8ec/0x3350 [ 2203.559157] ? lock_acquire+0x197/0x470 [ 2203.559986] ? lock_downgrade+0x6d0/0x6d0 [ 2203.560827] ? mark_lock+0xf5/0x2df0 [ 2203.561591] ? mark_lock+0xf5/0x2df0 [ 2203.562349] ? lock_chain_count+0x20/0x20 [ 2203.563177] ? lock_chain_count+0x20/0x20 [ 2203.564028] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2203.565009] ? mark_lock+0xf5/0x2df0 [ 2203.565788] ? lock_chain_count+0x20/0x20 [ 2203.566637] ? __lock_acquire+0x1657/0x5b00 [ 2203.567523] ? lock_chain_count+0x20/0x20 [ 2203.568383] ? __lock_acquire+0x1657/0x5b00 [ 2203.569255] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2203.570257] do_writepages+0xee/0x2a0 [ 2203.571037] ? page_writeback_cpu_online+0x20/0x20 [ 2203.572044] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2203.573114] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2203.574127] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2203.575190] ? ext4_fallocate+0x18d/0x3860 [ 2203.576070] filemap_write_and_wait_range+0x65/0x100 [ 2203.577093] ext4_punch_hole+0x178/0x1070 [ 2203.577938] ? downgrade_write+0x3a0/0x3a0 [ 2203.578786] ? down_write_killable+0x180/0x180 [ 2203.579752] ext4_fallocate+0xd8e/0x3860 [ 2203.580567] ? __x64_sys_fallocate+0xcf/0x140 [ 2203.581491] ? lock_release+0x680/0x680 [ 2203.582280] ? _cond_resched+0x12/0x80 [ 2203.583080] ? ext4_ext_truncate+0x250/0x250 [ 2203.583976] ? ext4_ext_truncate+0x250/0x250 [ 2203.584874] vfs_fallocate+0x48f/0xd00 [ 2203.585663] __x64_sys_fallocate+0xcf/0x140 [ 2203.586546] do_syscall_64+0x33/0x40 [ 2203.587290] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2203.588341] RIP: 0033:0x7f8399abcb19 14:26:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 2203.589091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2203.592970] RSP: 002b:00007f8397032188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2203.594495] RAX: ffffffffffffffda RBX: 00007f8399bcff60 RCX: 00007f8399abcb19 [ 2203.595934] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000007 [ 2203.597361] RBP: 00007f83970321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2203.598788] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.600250] R13: 00007ffce4cbfdaf R14: 00007f8397032300 R15: 0000000000022000 [ 2203.649279] FAULT_INJECTION: forcing a failure. [ 2203.649279] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2203.650900] CPU: 1 PID: 10459 Comm: syz-executor.6 Not tainted 5.10.192 #1 [ 2203.651648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2203.652540] Call Trace: [ 2203.652829] dump_stack+0x107/0x167 [ 2203.653228] should_fail.cold+0x5/0xa [ 2203.653650] __alloc_pages_nodemask+0x182/0x600 [ 2203.654158] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2203.654823] alloc_pages_current+0x187/0x280 [ 2203.655307] allocate_slab+0x26f/0x380 [ 2203.655743] ___slab_alloc+0x470/0x700 [ 2203.656166] ? io_submit_sqes+0x6f76/0x85c0 [ 2203.656632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2203.657227] ? trace_hardirqs_on+0x5b/0x180 [ 2203.657730] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2203.658270] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2203.658799] io_submit_sqes+0x6f76/0x85c0 [ 2203.659279] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2203.659847] ? __do_sys_io_uring_enter+0x6b5/0x18a0 [ 2203.660412] __do_sys_io_uring_enter+0x6b5/0x18a0 [ 2203.660966] ? lock_downgrade+0x6d0/0x6d0 [ 2203.661436] ? find_held_lock+0x2c/0x110 [ 2203.661898] ? io_submit_sqes+0x85c0/0x85c0 [ 2203.662385] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2203.662945] ? wait_for_completion_io+0x270/0x270 [ 2203.663496] ? rcu_read_lock_any_held+0x75/0xa0 [ 2203.664031] ? vfs_write+0x354/0xa70 [ 2203.664453] ? fput_many+0x2f/0x1a0 [ 2203.664866] ? ksys_write+0x1a9/0x260 [ 2203.665304] ? __ia32_sys_read+0xb0/0xb0 [ 2203.665770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2203.666373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2203.666973] do_syscall_64+0x33/0x40 [ 2203.667397] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2203.668001] RIP: 0033:0x7fc3488c6b19 [ 2203.668436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2203.670609] RSP: 002b:00007fc345e3c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2203.671490] RAX: ffffffffffffffda RBX: 00007fc3489d9f60 RCX: 00007fc3488c6b19 [ 2203.672312] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2203.673128] RBP: 00007fc345e3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2203.673955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2203.674758] R13: 00007ffc2c5547af R14: 00007fc345e3c300 R15: 0000000000022000 14:26:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 2) 14:26:31 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:26:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef", 0xa}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 2) 14:26:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 4) 14:26:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 2215.195020] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2215.204392] FAULT_INJECTION: forcing a failure. [ 2215.204392] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.205692] CPU: 0 PID: 10472 Comm: syz-executor.2 Not tainted 5.10.192 #1 [ 2215.206428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2215.207286] Call Trace: [ 2215.207600] dump_stack+0x107/0x167 [ 2215.207996] should_fail.cold+0x5/0xa [ 2215.208402] ? create_object.isra.0+0x3a/0xa20 [ 2215.208886] should_failslab+0x5/0x20 [ 2215.209298] kmem_cache_alloc+0x5b/0x310 [ 2215.209724] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2215.210197] create_object.isra.0+0x3a/0xa20 [ 2215.210666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2215.211233] kmem_cache_alloc+0x159/0x310 [ 2215.211683] ext4_init_io_end+0x23/0x180 [ 2215.212158] ext4_writepages+0x8ec/0x3350 [ 2215.212605] ? lock_acquire+0x197/0x470 [ 2215.213036] ? lock_downgrade+0x6d0/0x6d0 [ 2215.213475] ? mark_lock+0xf5/0x2df0 [ 2215.213873] ? mark_lock+0xf5/0x2df0 [ 2215.214267] ? lock_chain_count+0x20/0x20 [ 2215.214703] ? lock_chain_count+0x20/0x20 [ 2215.215142] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2215.215702] ? mark_lock+0xf5/0x2df0 [ 2215.215987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10479 comm=syz-executor.5 [ 2215.216141] ? lock_chain_count+0x20/0x20 [ 2215.219212] ? __lock_acquire+0x1657/0x5b00 [ 2215.219694] ? lock_chain_count+0x20/0x20 [ 2215.220171] ? __lock_acquire+0x1657/0x5b00 [ 2215.220658] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2215.221209] do_writepages+0xee/0x2a0 [ 2215.221632] ? page_writeback_cpu_online+0x20/0x20 [ 2215.222181] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2215.222775] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2215.223332] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2215.223955] ? ext4_fallocate+0x18d/0x3860 [ 2215.224440] filemap_write_and_wait_range+0x65/0x100 [ 2215.225024] ext4_punch_hole+0x178/0x1070 [ 2215.225483] ? downgrade_write+0x3a0/0x3a0 [ 2215.225961] ? down_write_killable+0x180/0x180 [ 2215.226122] FAULT_INJECTION: forcing a failure. [ 2215.226122] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.226478] ext4_fallocate+0xd8e/0x3860 [ 2215.226488] ? __x64_sys_fallocate+0xcf/0x140 [ 2215.226500] ? lock_release+0x680/0x680 [ 2215.226508] ? _cond_resched+0x12/0x80 [ 2215.226522] ? ext4_ext_truncate+0x250/0x250 [ 2215.226543] ? ext4_ext_truncate+0x250/0x250 [ 2215.231723] vfs_fallocate+0x48f/0xd00 [ 2215.232163] __x64_sys_fallocate+0xcf/0x140 [ 2215.232657] do_syscall_64+0x33/0x40 [ 2215.233080] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2215.233646] RIP: 0033:0x7f8399abcb19 [ 2215.234063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2215.236121] RSP: 002b:00007f8397032188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2215.236971] RAX: ffffffffffffffda RBX: 00007f8399bcff60 RCX: 00007f8399abcb19 [ 2215.237770] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000007 [ 2215.238548] RBP: 00007f83970321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.239323] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2215.240131] R13: 00007ffce4cbfdaf R14: 00007f8397032300 R15: 0000000000022000 [ 2215.240939] CPU: 1 PID: 10481 Comm: syz-executor.6 Not tainted 5.10.192 #1 [ 2215.242455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2215.243335] FAULT_INJECTION: forcing a failure. [ 2215.243335] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.244266] Call Trace: [ 2215.244297] dump_stack+0x107/0x167 [ 2215.244322] should_fail.cold+0x5/0xa [ 2215.244344] ? create_object.isra.0+0x3a/0xa20 [ 2215.244368] should_failslab+0x5/0x20 [ 2215.249611] kmem_cache_alloc+0x5b/0x310 [ 2215.250494] ? mark_held_locks+0x9e/0xe0 [ 2215.251381] create_object.isra.0+0x3a/0xa20 [ 2215.252345] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2215.253450] kmem_cache_alloc_bulk+0x168/0x320 [ 2215.254448] io_submit_sqes+0x6f76/0x85c0 [ 2215.255353] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2215.256431] ? __do_sys_io_uring_enter+0x6b5/0x18a0 [ 2215.257511] __do_sys_io_uring_enter+0x6b5/0x18a0 [ 2215.258562] ? lock_downgrade+0x6d0/0x6d0 [ 2215.259456] ? find_held_lock+0x2c/0x110 [ 2215.260356] ? io_submit_sqes+0x85c0/0x85c0 [ 2215.261303] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2215.262357] ? wait_for_completion_io+0x270/0x270 [ 2215.263409] ? rcu_read_lock_any_held+0x75/0xa0 [ 2215.264426] ? vfs_write+0x354/0xa70 [ 2215.265239] ? fput_many+0x2f/0x1a0 [ 2215.266029] ? ksys_write+0x1a9/0x260 [ 2215.266857] ? __ia32_sys_read+0xb0/0xb0 [ 2215.267743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2215.268891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2215.270016] do_syscall_64+0x33/0x40 [ 2215.270827] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2215.271950] RIP: 0033:0x7fc3488c6b19 [ 2215.272760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2215.276763] RSP: 002b:00007fc345e3c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2215.278411] RAX: ffffffffffffffda RBX: 00007fc3489d9f60 RCX: 00007fc3488c6b19 [ 2215.279964] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2215.281525] RBP: 00007fc345e3c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.283071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2215.284628] R13: 00007ffc2c5547af R14: 00007fc345e3c300 R15: 0000000000022000 [ 2215.286194] CPU: 0 PID: 10473 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2215.286962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2215.287877] Call Trace: [ 2215.288179] dump_stack+0x107/0x167 [ 2215.288585] should_fail.cold+0x5/0xa [ 2215.289002] ? __d_alloc+0x2a/0x990 [ 2215.289400] should_failslab+0x5/0x20 [ 2215.289815] kmem_cache_alloc+0x5b/0x310 [ 2215.290258] __d_alloc+0x2a/0x990 [ 2215.290634] ? dput+0x1ae/0xc90 [ 2215.290988] d_alloc+0x46/0x1c0 [ 2215.291352] __lookup_hash+0xcc/0x190 [ 2215.291767] filename_create+0x186/0x4a0 [ 2215.292348] ? filename_parentat+0x570/0x570 [ 2215.292916] ? getname_flags.part.0+0x1dd/0x4f0 [ 2215.293443] do_mkdirat+0xa2/0x2b0 [ 2215.293830] ? user_path_create+0xf0/0xf0 [ 2215.294279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2215.294842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2215.295403] do_syscall_64+0x33/0x40 [ 2215.295809] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2215.296365] RIP: 0033:0x7f66172e4b19 [ 2215.296766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2215.298726] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2215.299544] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2215.300313] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2215.301064] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.301814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2215.302562] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:26:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 5) [ 2215.349791] FAULT_INJECTION: forcing a failure. [ 2215.349791] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.352695] CPU: 1 PID: 10479 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2215.354179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2215.355964] Call Trace: [ 2215.356544] dump_stack+0x107/0x167 [ 2215.357349] should_fail.cold+0x5/0xa [ 2215.358177] ? create_object.isra.0+0x3a/0xa20 [ 2215.359162] should_failslab+0x5/0x20 [ 2215.359990] kmem_cache_alloc+0x5b/0x310 [ 2215.360933] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2215.361910] create_object.isra.0+0x3a/0xa20 [ 2215.362864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2215.363979] kmem_cache_alloc+0x159/0x310 [ 2215.364888] ext4_init_io_end+0x23/0x180 [ 2215.365777] ext4_writepages+0x8ec/0x3350 [ 2215.366689] ? lock_acquire+0x197/0x470 [ 2215.367547] ? lock_downgrade+0x6d0/0x6d0 [ 2215.368461] ? mark_lock+0xf5/0x2df0 [ 2215.369252] ? mark_lock+0xf5/0x2df0 [ 2215.370067] ? lock_chain_count+0x20/0x20 [ 2215.370955] ? lock_chain_count+0x20/0x20 [ 2215.371873] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2215.371944] FAULT_INJECTION: forcing a failure. [ 2215.371944] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.372938] ? mark_lock+0xf5/0x2df0 [ 2215.372965] ? lock_chain_count+0x20/0x20 [ 2215.373005] ? __lock_acquire+0x1657/0x5b00 [ 2215.376796] ? lock_chain_count+0x20/0x20 [ 2215.377717] ? __lock_acquire+0x1657/0x5b00 [ 2215.378667] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2215.379734] do_writepages+0xee/0x2a0 [ 2215.380578] ? page_writeback_cpu_online+0x20/0x20 [ 2215.381649] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2215.382811] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2215.383911] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2215.385072] ? ext4_fallocate+0x18d/0x3860 [ 2215.386017] filemap_write_and_wait_range+0x65/0x100 [ 2215.387128] ext4_punch_hole+0x178/0x1070 [ 2215.388035] ? downgrade_write+0x3a0/0x3a0 [ 2215.388952] ? down_write_killable+0x180/0x180 [ 2215.389964] ext4_fallocate+0xd8e/0x3860 [ 2215.390848] ? __x64_sys_fallocate+0xcf/0x140 [ 2215.391830] ? lock_release+0x680/0x680 [ 2215.392705] ? _cond_resched+0x12/0x80 [ 2215.393563] ? ext4_ext_truncate+0x250/0x250 [ 2215.394513] ? ext4_ext_truncate+0x250/0x250 [ 2215.395473] vfs_fallocate+0x48f/0xd00 [ 2215.396334] __x64_sys_fallocate+0xcf/0x140 [ 2215.397280] do_syscall_64+0x33/0x40 [ 2215.398104] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2215.399221] RIP: 0033:0x7f5d3b9e6b19 [ 2215.400055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2215.404085] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2215.405746] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2215.407297] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2215.408854] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.410413] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2215.411981] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2215.413567] CPU: 0 PID: 10485 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2215.414372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2215.415261] Call Trace: [ 2215.415556] dump_stack+0x107/0x167 [ 2215.415948] should_fail.cold+0x5/0xa [ 2215.416349] ? create_object.isra.0+0x3a/0xa20 [ 2215.416834] should_failslab+0x5/0x20 [ 2215.417238] kmem_cache_alloc+0x5b/0x310 [ 2215.417679] create_object.isra.0+0x3a/0xa20 [ 2215.418141] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2215.418686] kmem_cache_alloc+0x159/0x310 [ 2215.419136] __d_alloc+0x2a/0x990 [ 2215.419501] ? dput+0x1ae/0xc90 [ 2215.419867] d_alloc+0x46/0x1c0 [ 2215.420238] __lookup_hash+0xcc/0x190 [ 2215.420660] filename_create+0x186/0x4a0 [ 2215.421096] ? filename_parentat+0x570/0x570 [ 2215.421557] ? getname_flags.part.0+0x1dd/0x4f0 [ 2215.422043] do_mkdirat+0xa2/0x2b0 [ 2215.422415] ? user_path_create+0xf0/0xf0 [ 2215.422856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2215.423411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2215.423957] do_syscall_64+0x33/0x40 [ 2215.424351] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2215.424891] RIP: 0033:0x7f66172e4b19 [ 2215.425283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2215.427194] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2215.428001] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2215.428754] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2215.429519] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.430270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2215.431029] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:26:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 14:26:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 3) 14:26:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2215.506301] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:26:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef2993", 0xc}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) [ 2215.596252] FAULT_INJECTION: forcing a failure. [ 2215.596252] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.597784] CPU: 0 PID: 10493 Comm: syz-executor.2 Not tainted 5.10.192 #1 [ 2215.598524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2215.599411] Call Trace: [ 2215.599708] dump_stack+0x107/0x167 [ 2215.600106] should_fail.cold+0x5/0xa [ 2215.600517] ? ext4_init_io_end+0x23/0x180 [ 2215.600973] should_failslab+0x5/0x20 [ 2215.601383] kmem_cache_alloc+0x5b/0x310 [ 2215.601820] ext4_init_io_end+0x23/0x180 [ 2215.602254] ext4_writepages+0xee9/0x3350 [ 2215.602707] ? lock_acquire+0x197/0x470 [ 2215.603127] ? lock_downgrade+0x6d0/0x6d0 [ 2215.603567] ? mark_lock+0xf5/0x2df0 [ 2215.603978] ? lock_chain_count+0x20/0x20 [ 2215.604420] ? lock_chain_count+0x20/0x20 [ 2215.604859] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2215.605377] ? mark_lock+0xf5/0x2df0 [ 2215.605767] ? lock_chain_count+0x20/0x20 [ 2215.606213] ? __lock_acquire+0x1657/0x5b00 [ 2215.606667] ? lock_chain_count+0x20/0x20 [ 2215.607116] ? __lock_acquire+0x1657/0x5b00 [ 2215.607576] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2215.608099] do_writepages+0xee/0x2a0 [ 2215.608516] ? page_writeback_cpu_online+0x20/0x20 [ 2215.609041] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2215.609607] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2215.610133] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2215.610701] ? ext4_fallocate+0x18d/0x3860 [ 2215.611159] filemap_write_and_wait_range+0x65/0x100 [ 2215.611698] ext4_punch_hole+0x178/0x1070 [ 2215.612140] ? downgrade_write+0x3a0/0x3a0 [ 2215.612588] ? down_write_killable+0x180/0x180 [ 2215.613083] ext4_fallocate+0xd8e/0x3860 [ 2215.613515] ? __x64_sys_fallocate+0xcf/0x140 [ 2215.613994] ? lock_release+0x680/0x680 [ 2215.614412] ? _cond_resched+0x12/0x80 [ 2215.614825] ? ext4_ext_truncate+0x250/0x250 [ 2215.615292] ? ext4_ext_truncate+0x250/0x250 [ 2215.615758] vfs_fallocate+0x48f/0xd00 [ 2215.616188] __x64_sys_fallocate+0xcf/0x140 [ 2215.616659] do_syscall_64+0x33/0x40 [ 2215.617053] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2215.617592] RIP: 0033:0x7f8399abcb19 [ 2215.617995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2215.619934] RSP: 002b:00007f8397032188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2215.620728] RAX: ffffffffffffffda RBX: 00007f8399bcff60 RCX: 00007f8399abcb19 [ 2215.621475] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000007 [ 2215.622233] RBP: 00007f83970321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.623004] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2215.623752] R13: 00007ffce4cbfdaf R14: 00007f8397032300 R15: 0000000000022000 [ 2230.060372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10510 comm=syz-executor.5 14:26:46 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 2230.096378] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:26:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 4) 14:26:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 3) 14:26:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 6) 14:26:46 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:46 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef2993", 0xc}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) [ 2230.111419] FAULT_INJECTION: forcing a failure. [ 2230.111419] name failslab, interval 1, probability 0, space 0, times 0 ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2230.114763] CPU: 1 PID: 10518 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2230.116384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.118164] Call Trace: [ 2230.118738] dump_stack+0x107/0x167 [ 2230.119531] should_fail.cold+0x5/0xa [ 2230.120377] ? cgroup_mkdir+0x254/0xf50 [ 2230.121248] should_failslab+0x5/0x20 [ 2230.122057] __kmalloc+0x72/0x390 [ 2230.122825] cgroup_mkdir+0x254/0xf50 [ 2230.123668] ? cgroup_destroy_locked+0x710/0x710 [ 2230.124719] kernfs_iop_mkdir+0x14d/0x1e0 [ 2230.125641] vfs_mkdir+0x493/0x700 [ 2230.126424] do_mkdirat+0x150/0x2b0 [ 2230.127222] ? user_path_create+0xf0/0xf0 [ 2230.128149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2230.129294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2230.130422] do_syscall_64+0x33/0x40 [ 2230.131243] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2230.132378] RIP: 0033:0x7f66172e4b19 [ 2230.133196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.137246] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2230.138907] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2230.140487] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2230.142053] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.143622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.145194] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2230.159836] FAULT_INJECTION: forcing a failure. [ 2230.159836] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.162715] CPU: 1 PID: 10510 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2230.164221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.166012] Call Trace: [ 2230.166619] dump_stack+0x107/0x167 [ 2230.167425] should_fail.cold+0x5/0xa [ 2230.168275] ? ext4_init_io_end+0x23/0x180 [ 2230.169205] should_failslab+0x5/0x20 [ 2230.170031] kmem_cache_alloc+0x5b/0x310 [ 2230.170925] ext4_init_io_end+0x23/0x180 [ 2230.171807] ext4_writepages+0xee9/0x3350 [ 2230.172739] ? lock_acquire+0x197/0x470 [ 2230.173649] ? lock_downgrade+0x6d0/0x6d0 [ 2230.174587] ? mark_lock+0xf5/0x2df0 [ 2230.175427] ? lock_chain_count+0x20/0x20 [ 2230.176342] ? lock_chain_count+0x20/0x20 [ 2230.177238] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2230.178306] ? mark_lock+0xf5/0x2df0 [ 2230.179126] ? lock_chain_count+0x20/0x20 [ 2230.180066] ? __lock_acquire+0x1657/0x5b00 [ 2230.181007] ? lock_chain_count+0x20/0x20 [ 2230.181927] ? __lock_acquire+0x1657/0x5b00 [ 2230.182880] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2230.183951] do_writepages+0xee/0x2a0 [ 2230.184791] ? page_writeback_cpu_online+0x20/0x20 [ 2230.185846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2230.186992] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2230.188078] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2230.189230] ? ext4_fallocate+0x18d/0x3860 [ 2230.190176] filemap_write_and_wait_range+0x65/0x100 [ 2230.191295] ext4_punch_hole+0x178/0x1070 [ 2230.192234] ? downgrade_write+0x3a0/0x3a0 [ 2230.193171] ? down_write_killable+0x180/0x180 [ 2230.194181] ext4_fallocate+0xd8e/0x3860 [ 2230.195081] ? __x64_sys_fallocate+0xcf/0x140 [ 2230.196072] ? lock_release+0x680/0x680 [ 2230.196957] ? _cond_resched+0x12/0x80 [ 2230.197811] ? ext4_ext_truncate+0x250/0x250 [ 2230.198782] ? ext4_ext_truncate+0x250/0x250 [ 2230.199751] vfs_fallocate+0x48f/0xd00 [ 2230.200627] __x64_sys_fallocate+0xcf/0x140 [ 2230.201602] do_syscall_64+0x33/0x40 [ 2230.202421] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2230.203551] RIP: 0033:0x7f5d3b9e6b19 [ 2230.204366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.208347] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2230.210021] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2230.211577] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2230.213152] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.214721] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.216290] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2230.243165] FAULT_INJECTION: forcing a failure. [ 2230.243165] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.245912] CPU: 1 PID: 10519 Comm: syz-executor.2 Not tainted 5.10.192 #1 [ 2230.247401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.249199] Call Trace: [ 2230.249771] dump_stack+0x107/0x167 [ 2230.250562] should_fail.cold+0x5/0xa [ 2230.251382] ? create_object.isra.0+0x3a/0xa20 [ 2230.252389] should_failslab+0x5/0x20 [ 2230.253212] kmem_cache_alloc+0x5b/0x310 [ 2230.254089] create_object.isra.0+0x3a/0xa20 [ 2230.255031] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2230.256131] kmem_cache_alloc+0x159/0x310 [ 2230.257029] ext4_init_io_end+0x23/0x180 [ 2230.257945] ext4_writepages+0xee9/0x3350 [ 2230.258842] ? lock_acquire+0x197/0x470 [ 2230.259733] ? lock_downgrade+0x6d0/0x6d0 [ 2230.260659] ? mark_lock+0xf5/0x2df0 [ 2230.261464] ? lock_chain_count+0x20/0x20 [ 2230.262361] ? lock_chain_count+0x20/0x20 [ 2230.263254] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2230.264320] ? mark_lock+0xf5/0x2df0 [ 2230.265128] ? lock_chain_count+0x20/0x20 [ 2230.266047] ? __lock_acquire+0x1657/0x5b00 [ 2230.266973] ? lock_chain_count+0x20/0x20 [ 2230.267884] ? __lock_acquire+0x1657/0x5b00 [ 2230.268845] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2230.269904] do_writepages+0xee/0x2a0 [ 2230.270730] ? page_writeback_cpu_online+0x20/0x20 [ 2230.271799] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2230.272960] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2230.274033] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2230.275184] ? ext4_fallocate+0x18d/0x3860 [ 2230.276116] filemap_write_and_wait_range+0x65/0x100 [ 2230.277211] ext4_punch_hole+0x178/0x1070 [ 2230.278104] ? downgrade_write+0x3a0/0x3a0 [ 2230.279019] ? down_write_killable+0x180/0x180 [ 2230.280014] ext4_fallocate+0xd8e/0x3860 [ 2230.280917] ? __x64_sys_fallocate+0xcf/0x140 [ 2230.281892] ? lock_release+0x680/0x680 [ 2230.282754] ? _cond_resched+0x12/0x80 [ 2230.283620] ? ext4_ext_truncate+0x250/0x250 [ 2230.284582] ? ext4_ext_truncate+0x250/0x250 [ 2230.285532] vfs_fallocate+0x48f/0xd00 [ 2230.286397] __x64_sys_fallocate+0xcf/0x140 [ 2230.287349] do_syscall_64+0x33/0x40 [ 2230.288179] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2230.289295] RIP: 0033:0x7f8399abcb19 [ 2230.290114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.294083] RSP: 002b:00007f8397032188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2230.295770] RAX: ffffffffffffffda RBX: 00007f8399bcff60 RCX: 00007f8399abcb19 [ 2230.297332] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000007 [ 2230.298891] RBP: 00007f83970321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.300472] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.302029] R13: 00007ffce4cbfdaf R14: 00007f8397032300 R15: 0000000000022000 14:26:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:46 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 7) 14:26:46 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef2993", 0xc}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 4) 14:26:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, 0x0, &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 5) [ 2230.520427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10540 comm=syz-executor.5 14:26:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(0x0, 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2230.576171] FAULT_INJECTION: forcing a failure. [ 2230.576171] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.579156] CPU: 0 PID: 10536 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2230.580780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.582677] Call Trace: [ 2230.583283] dump_stack+0x107/0x167 [ 2230.584136] should_fail.cold+0x5/0xa [ 2230.585006] ? create_object.isra.0+0x3a/0xa20 [ 2230.586056] should_failslab+0x5/0x20 [ 2230.586924] kmem_cache_alloc+0x5b/0x310 [ 2230.587854] ? selinux_determine_inode_label+0x1ab/0x340 [ 2230.589101] create_object.isra.0+0x3a/0xa20 [ 2230.590109] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2230.591273] __kmalloc+0x16e/0x390 [ 2230.592118] cgroup_mkdir+0x254/0xf50 [ 2230.592995] ? cgroup_destroy_locked+0x710/0x710 [ 2230.594088] kernfs_iop_mkdir+0x14d/0x1e0 [ 2230.595036] vfs_mkdir+0x493/0x700 [ 2230.595848] do_mkdirat+0x150/0x2b0 [ 2230.596683] ? user_path_create+0xf0/0xf0 [ 2230.597621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2230.598796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2230.599960] do_syscall_64+0x33/0x40 [ 2230.600807] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2230.601958] RIP: 0033:0x7f66172e4b19 [ 2230.602795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.606927] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2230.608654] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2230.610268] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2230.611866] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.613451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.615027] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2230.630077] FAULT_INJECTION: forcing a failure. [ 2230.630077] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.631601] CPU: 1 PID: 10540 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2230.632411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.633381] Call Trace: [ 2230.633717] dump_stack+0x107/0x167 [ 2230.634182] should_fail.cold+0x5/0xa [ 2230.634663] ? create_object.isra.0+0x3a/0xa20 [ 2230.635241] should_failslab+0x5/0x20 [ 2230.635720] kmem_cache_alloc+0x5b/0x310 [ 2230.636235] create_object.isra.0+0x3a/0xa20 [ 2230.636776] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2230.637406] kmem_cache_alloc+0x159/0x310 [ 2230.637930] ext4_init_io_end+0x23/0x180 [ 2230.638435] ext4_writepages+0xee9/0x3350 [ 2230.638951] ? lock_acquire+0x197/0x470 [ 2230.639441] ? lock_downgrade+0x6d0/0x6d0 [ 2230.639945] ? mark_lock+0xf5/0x2df0 [ 2230.640402] ? lock_chain_count+0x20/0x20 [ 2230.640907] ? lock_chain_count+0x20/0x20 [ 2230.641414] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2230.642003] ? mark_lock+0xf5/0x2df0 [ 2230.642457] ? lock_chain_count+0x20/0x20 [ 2230.642972] ? __lock_acquire+0x1657/0x5b00 [ 2230.643488] ? lock_chain_count+0x20/0x20 [ 2230.643765] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2230.643994] ? __lock_acquire+0x1657/0x5b00 [ 2230.646166] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2230.646751] do_writepages+0xee/0x2a0 [ 2230.647212] ? page_writeback_cpu_online+0x20/0x20 [ 2230.647803] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2230.648454] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2230.649047] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2230.649685] ? ext4_fallocate+0x18d/0x3860 [ 2230.650204] filemap_write_and_wait_range+0x65/0x100 [ 2230.650817] ext4_punch_hole+0x178/0x1070 [ 2230.651307] ? downgrade_write+0x3a0/0x3a0 [ 2230.651813] ? down_write_killable+0x180/0x180 [ 2230.652418] ext4_fallocate+0xd8e/0x3860 [ 2230.652908] ? __x64_sys_fallocate+0xcf/0x140 [ 2230.653462] ? lock_release+0x680/0x680 [ 2230.653954] ? _cond_resched+0x12/0x80 [ 2230.654451] ? ext4_ext_truncate+0x250/0x250 [ 2230.655008] ? ext4_ext_truncate+0x250/0x250 [ 2230.655554] vfs_fallocate+0x48f/0xd00 [ 2230.656059] __x64_sys_fallocate+0xcf/0x140 [ 2230.656606] do_syscall_64+0x33/0x40 [ 2230.657071] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2230.657714] RIP: 0033:0x7f5d3b9e6b19 [ 2230.658179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.660498] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2230.661447] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2230.662339] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2230.663237] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.664139] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.665037] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:26:46 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:26:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, 0x0, &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:46 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) 14:26:59 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 14:26:59 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x7, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:26:59 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x0, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:26:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 8) 14:26:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 5) 14:26:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) 14:26:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(0x0, 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:26:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, 0x0, &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2243.529347] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2243.535078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10579 comm=syz-executor.5 14:26:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(0x0, 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2243.570338] FAULT_INJECTION: forcing a failure. [ 2243.570338] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.572995] CPU: 0 PID: 10575 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2243.573041] FAULT_INJECTION: forcing a failure. [ 2243.573041] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.574429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2243.574476] Call Trace: [ 2243.574508] dump_stack+0x107/0x167 [ 2243.574540] should_fail.cold+0x5/0xa [ 2243.580411] ? create_object.isra.0+0x3a/0xa20 [ 2243.581344] should_failslab+0x5/0x20 [ 2243.582120] kmem_cache_alloc+0x5b/0x310 [ 2243.582950] create_object.isra.0+0x3a/0xa20 [ 2243.583842] kmemleak_alloc_percpu+0xa0/0x100 [ 2243.584772] pcpu_alloc+0x4e2/0x1240 [ 2243.585547] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2243.586514] percpu_ref_init+0x31/0x3d0 [ 2243.587333] cgroup_mkdir+0x28b/0xf50 [ 2243.588121] ? cgroup_destroy_locked+0x710/0x710 [ 2243.589113] kernfs_iop_mkdir+0x14d/0x1e0 [ 2243.589965] vfs_mkdir+0x493/0x700 [ 2243.590696] do_mkdirat+0x150/0x2b0 [ 2243.591437] ? user_path_create+0xf0/0xf0 [ 2243.592299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2243.593371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2243.594425] do_syscall_64+0x33/0x40 [ 2243.595194] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2243.596254] RIP: 0033:0x7f66172e4b19 [ 2243.597014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.600768] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2243.602324] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2243.603778] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2243.605221] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.606654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2243.608083] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2243.609640] CPU: 1 PID: 10579 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2243.611022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2243.612775] Call Trace: [ 2243.613344] dump_stack+0x107/0x167 [ 2243.614120] should_fail.cold+0x5/0xa [ 2243.614930] ? jbd2__journal_start+0x190/0x7e0 [ 2243.616030] should_failslab+0x5/0x20 [ 2243.617130] kmem_cache_alloc+0x5b/0x310 [ 2243.618000] jbd2__journal_start+0x190/0x7e0 [ 2243.618941] __ext4_journal_start_sb+0x214/0x390 [ 2243.619954] ext4_writepages+0x102d/0x3350 [ 2243.620864] ? lock_acquire+0x197/0x470 [ 2243.621715] ? lock_chain_count+0x20/0x20 [ 2243.622588] ? mark_lock+0xf5/0x2df0 [ 2243.623371] ? lock_chain_count+0x20/0x20 [ 2243.624256] ? lock_chain_count+0x20/0x20 [ 2243.625135] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2243.626162] ? mark_lock+0xf5/0x2df0 [ 2243.626952] ? mark_lock+0xf5/0x2df0 [ 2243.627753] ? __lock_acquire+0x1657/0x5b00 [ 2243.628694] ? lock_chain_count+0x20/0x20 [ 2243.629582] ? __lock_acquire+0x1657/0x5b00 [ 2243.630505] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2243.631532] do_writepages+0xee/0x2a0 [ 2243.632347] ? page_writeback_cpu_online+0x20/0x20 [ 2243.633389] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2243.634526] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2243.635571] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2243.636716] ? ext4_fallocate+0x18d/0x3860 [ 2243.637636] filemap_write_and_wait_range+0x65/0x100 [ 2243.638712] ext4_punch_hole+0x178/0x1070 [ 2243.639580] ? downgrade_write+0x3a0/0x3a0 [ 2243.640481] ? down_write_killable+0x180/0x180 [ 2243.641449] ext4_fallocate+0xd8e/0x3860 [ 2243.642314] ? __x64_sys_fallocate+0xcf/0x140 [ 2243.643256] ? lock_release+0x680/0x680 [ 2243.644089] ? _cond_resched+0x12/0x80 [ 2243.644935] ? ext4_ext_truncate+0x250/0x250 [ 2243.645868] ? ext4_ext_truncate+0x250/0x250 [ 2243.646790] vfs_fallocate+0x48f/0xd00 [ 2243.647614] __x64_sys_fallocate+0xcf/0x140 [ 2243.648532] do_syscall_64+0x33/0x40 [ 2243.649313] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2243.650380] RIP: 0033:0x7f5d3b9e6b19 [ 2243.651160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.655042] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2243.656672] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2243.658175] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2243.659680] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.661221] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2243.662737] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2243.665725] EXT4-fs (sda): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 16017; err -12 14:26:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', 0x0, 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 9) 14:27:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', 0x0, 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 6) [ 2243.870059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10591 comm=syz-executor.5 [ 2243.887210] FAULT_INJECTION: forcing a failure. [ 2243.887210] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.889134] FAULT_INJECTION: forcing a failure. [ 2243.889134] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.889688] CPU: 0 PID: 10588 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2243.889699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2243.889705] Call Trace: [ 2243.889732] dump_stack+0x107/0x167 [ 2243.889755] should_fail.cold+0x5/0xa [ 2243.889776] ? create_object.isra.0+0x3a/0xa20 [ 2243.889797] should_failslab+0x5/0x20 [ 2243.889814] kmem_cache_alloc+0x5b/0x310 [ 2243.889841] create_object.isra.0+0x3a/0xa20 [ 2243.900556] kmemleak_alloc_percpu+0xa0/0x100 [ 2243.901473] pcpu_alloc+0x4e2/0x1240 [ 2243.902246] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2243.903209] percpu_ref_init+0x31/0x3d0 [ 2243.904022] cgroup_mkdir+0x28b/0xf50 [ 2243.904828] ? cgroup_destroy_locked+0x710/0x710 [ 2243.905800] kernfs_iop_mkdir+0x14d/0x1e0 [ 2243.906651] vfs_mkdir+0x493/0x700 [ 2243.907380] do_mkdirat+0x150/0x2b0 [ 2243.908122] ? user_path_create+0xf0/0xf0 [ 2243.908985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2243.910047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2243.911097] do_syscall_64+0x33/0x40 [ 2243.911881] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2243.912979] RIP: 0033:0x7f66172e4b19 [ 2243.913763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.917683] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2243.919330] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2243.920862] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2243.922359] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.923828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2243.925274] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2243.926961] CPU: 1 PID: 10591 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2243.928442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2243.930199] Call Trace: [ 2243.930765] dump_stack+0x107/0x167 [ 2243.931559] should_fail.cold+0x5/0xa [ 2243.932370] ? create_object.isra.0+0x3a/0xa20 [ 2243.933337] should_failslab+0x5/0x20 [ 2243.934145] kmem_cache_alloc+0x5b/0x310 [ 2243.935006] create_object.isra.0+0x3a/0xa20 [ 2243.935932] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2243.937022] kmem_cache_alloc+0x159/0x310 [ 2243.937912] jbd2__journal_start+0x190/0x7e0 [ 2243.938874] __ext4_journal_start_sb+0x214/0x390 [ 2243.939889] ext4_writepages+0x102d/0x3350 [ 2243.940794] ? lock_acquire+0x197/0x470 [ 2243.941641] ? lock_downgrade+0x6d0/0x6d0 [ 2243.942516] ? mark_lock+0xf5/0x2df0 [ 2243.943301] ? lock_chain_count+0x20/0x20 [ 2243.944175] ? lock_chain_count+0x20/0x20 [ 2243.945068] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2243.946094] ? mark_lock+0xf5/0x2df0 [ 2243.946885] ? lock_chain_count+0x20/0x20 [ 2243.947777] ? __lock_acquire+0x1657/0x5b00 [ 2243.948714] ? lock_chain_count+0x20/0x20 [ 2243.949598] ? __lock_acquire+0x1657/0x5b00 [ 2243.950529] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2243.951560] do_writepages+0xee/0x2a0 [ 2243.952390] ? page_writeback_cpu_online+0x20/0x20 [ 2243.953423] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2243.954568] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2243.955620] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2243.956791] ? ext4_fallocate+0x18d/0x3860 [ 2243.957706] filemap_write_and_wait_range+0x65/0x100 [ 2243.958799] ext4_punch_hole+0x178/0x1070 [ 2243.959676] ? downgrade_write+0x3a0/0x3a0 [ 2243.960605] ? down_write_killable+0x180/0x180 [ 2243.961585] ext4_fallocate+0xd8e/0x3860 [ 2243.962460] ? __x64_sys_fallocate+0xcf/0x140 [ 2243.963409] ? lock_release+0x680/0x680 [ 2243.964278] ? _cond_resched+0x12/0x80 [ 2243.965125] ? ext4_ext_truncate+0x250/0x250 [ 2243.966081] ? ext4_ext_truncate+0x250/0x250 [ 2243.966964] vfs_fallocate+0x48f/0xd00 [ 2243.967753] __x64_sys_fallocate+0xcf/0x140 [ 2243.968629] do_syscall_64+0x33/0x40 [ 2243.969375] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2243.970393] RIP: 0033:0x7f5d3b9e6b19 [ 2243.971138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.974804] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2243.976333] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2243.977755] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2243.979165] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.980597] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2243.982008] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:27:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 10) 14:27:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 7) 14:27:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x7, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:27:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffd, 0x0, 0x0, 0x0) 14:27:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x2, 0x4077, 0x8000) 14:27:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', 0x0, 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:14 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x0, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 2257.879668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10603 comm=syz-executor.5 [ 2257.889581] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2257.925186] FAULT_INJECTION: forcing a failure. [ 2257.925186] name failslab, interval 1, probability 0, space 0, times 0 [ 2257.927365] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2257.927838] CPU: 0 PID: 10606 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2257.930437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2257.932134] Call Trace: [ 2257.932690] dump_stack+0x107/0x167 [ 2257.933441] should_fail.cold+0x5/0xa [ 2257.934220] ? percpu_ref_init+0xd8/0x3d0 [ 2257.935070] should_failslab+0x5/0x20 [ 2257.935850] kmem_cache_alloc_trace+0x55/0x320 [ 2257.936790] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2257.937750] percpu_ref_init+0xd8/0x3d0 [ 2257.938564] cgroup_mkdir+0x28b/0xf50 [ 2257.939345] ? cgroup_destroy_locked+0x710/0x710 [ 2257.940319] kernfs_iop_mkdir+0x14d/0x1e0 [ 2257.941183] vfs_mkdir+0x493/0x700 [ 2257.941908] do_mkdirat+0x150/0x2b0 [ 2257.942654] ? user_path_create+0xf0/0xf0 [ 2257.943504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2257.944574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2257.945618] do_syscall_64+0x33/0x40 [ 2257.946371] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2257.947401] RIP: 0033:0x7f66172e4b19 [ 2257.948150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2257.951936] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2257.953507] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2257.954938] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2257.956388] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2257.957822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2257.959251] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2257.964490] FAULT_INJECTION: forcing a failure. [ 2257.964490] name failslab, interval 1, probability 0, space 0, times 0 [ 2257.967719] CPU: 0 PID: 10603 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2257.969123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2257.970791] Call Trace: [ 2257.971324] dump_stack+0x107/0x167 [ 2257.972066] should_fail.cold+0x5/0xa [ 2257.972847] ? ext4_alloc_io_end_vec+0x1f/0x120 [ 2257.973788] should_failslab+0x5/0x20 [ 2257.974555] kmem_cache_alloc+0x5b/0x310 [ 2257.975392] ext4_alloc_io_end_vec+0x1f/0x120 [ 2257.976301] ext4_writepages+0x17a5/0x3350 [ 2257.977205] ? lock_acquire+0x197/0x470 [ 2257.978023] ? lock_downgrade+0x6d0/0x6d0 [ 2257.978881] ? lock_chain_count+0x20/0x20 [ 2257.979723] ? lock_chain_count+0x20/0x20 [ 2257.980574] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2257.981563] ? mark_lock+0xf5/0x2df0 [ 2257.982330] ? lock_chain_count+0x20/0x20 [ 2257.983187] ? __lock_acquire+0x1657/0x5b00 [ 2257.984069] ? lock_chain_count+0x20/0x20 [ 2257.984938] ? __lock_acquire+0x1657/0x5b00 [ 2257.985814] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2257.986803] do_writepages+0xee/0x2a0 [ 2257.987575] ? page_writeback_cpu_online+0x20/0x20 [ 2257.988577] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2257.989652] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2257.990657] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2257.991737] ? ext4_fallocate+0x18d/0x3860 [ 2257.992615] filemap_write_and_wait_range+0x65/0x100 [ 2257.993640] ext4_punch_hole+0x178/0x1070 [ 2257.994479] ? downgrade_write+0x3a0/0x3a0 [ 2257.995331] ? down_write_killable+0x180/0x180 [ 2257.996265] ext4_fallocate+0xd8e/0x3860 [ 2257.997107] ? __x64_sys_fallocate+0xcf/0x140 [ 2257.998017] ? lock_release+0x680/0x680 [ 2257.998816] ? _cond_resched+0x12/0x80 [ 2257.999607] ? ext4_ext_truncate+0x250/0x250 [ 2258.000507] ? ext4_ext_truncate+0x250/0x250 [ 2258.001386] vfs_fallocate+0x48f/0xd00 [ 2258.002177] __x64_sys_fallocate+0xcf/0x140 [ 2258.003043] do_syscall_64+0x33/0x40 [ 2258.003801] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2258.004831] RIP: 0033:0x7f5d3b9e6b19 [ 2258.005576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2258.009264] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2258.010786] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2258.012216] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2258.013647] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.015066] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2258.016495] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:27:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x4, 0x4077, 0x8000) [ 2258.084039] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x7, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:27:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 11) [ 2258.110199] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 8) 14:27:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) [ 2258.187783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10634 comm=syz-executor.5 14:27:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x6, 0x4077, 0x8000) [ 2258.217171] FAULT_INJECTION: forcing a failure. [ 2258.217171] name failslab, interval 1, probability 0, space 0, times 0 [ 2258.220028] CPU: 1 PID: 10632 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2258.221528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2258.223300] Call Trace: [ 2258.223871] dump_stack+0x107/0x167 [ 2258.224673] should_fail.cold+0x5/0xa [ 2258.225496] ? percpu_ref_init+0xd8/0x3d0 [ 2258.226394] should_failslab+0x5/0x20 [ 2258.227209] kmem_cache_alloc_trace+0x55/0x320 [ 2258.228206] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2258.229225] percpu_ref_init+0xd8/0x3d0 [ 2258.230090] cgroup_mkdir+0x28b/0xf50 [ 2258.230921] ? cgroup_destroy_locked+0x710/0x710 [ 2258.231948] kernfs_iop_mkdir+0x14d/0x1e0 [ 2258.232863] vfs_mkdir+0x493/0x700 [ 2258.233638] do_mkdirat+0x150/0x2b0 [ 2258.234426] ? user_path_create+0xf0/0xf0 [ 2258.235332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2258.236470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2258.237585] do_syscall_64+0x33/0x40 [ 2258.238382] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2258.239486] RIP: 0033:0x7f66172e4b19 [ 2258.240285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2258.244261] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2258.245582] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2258.245911] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2258.248500] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2258.250012] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.251525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2258.253046] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2258.274486] FAULT_INJECTION: forcing a failure. [ 2258.274486] name failslab, interval 1, probability 0, space 0, times 0 [ 2258.276242] CPU: 0 PID: 10634 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2258.277274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2258.278518] Call Trace: [ 2258.278923] dump_stack+0x107/0x167 [ 2258.279473] should_fail.cold+0x5/0xa [ 2258.280034] ? create_object.isra.0+0x3a/0xa20 14:27:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2258.280731] should_failslab+0x5/0x20 [ 2258.281401] kmem_cache_alloc+0x5b/0x310 [ 2258.282033] create_object.isra.0+0x3a/0xa20 [ 2258.282699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2258.283484] kmem_cache_alloc+0x159/0x310 [ 2258.284110] ext4_alloc_io_end_vec+0x1f/0x120 [ 2258.284807] ext4_writepages+0x17a5/0x3350 [ 2258.285440] ? lock_acquire+0x197/0x470 [ 2258.286059] ? lock_downgrade+0x6d0/0x6d0 [ 2258.286700] ? lock_chain_count+0x20/0x20 [ 2258.287324] ? lock_chain_count+0x20/0x20 [ 2258.287957] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2258.288720] ? mark_lock+0xf5/0x2df0 [ 2258.289302] ? lock_chain_count+0x20/0x20 [ 2258.289945] ? __lock_acquire+0x1657/0x5b00 [ 2258.290579] ? lock_chain_count+0x20/0x20 [ 2258.291220] ? __lock_acquire+0x1657/0x5b00 [ 2258.291876] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2258.292648] do_writepages+0xee/0x2a0 [ 2258.293231] ? page_writeback_cpu_online+0x20/0x20 [ 2258.293949] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2258.294730] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2258.295454] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2258.296232] ? ext4_fallocate+0x18d/0x3860 [ 2258.296889] filemap_write_and_wait_range+0x65/0x100 [ 2258.297630] ext4_punch_hole+0x178/0x1070 [ 2258.298234] ? downgrade_write+0x3a0/0x3a0 [ 2258.298865] ? down_write_killable+0x180/0x180 [ 2258.299522] ext4_fallocate+0xd8e/0x3860 [ 2258.300115] ? __x64_sys_fallocate+0xcf/0x140 [ 2258.300768] ? lock_release+0x680/0x680 [ 2258.301348] ? _cond_resched+0x12/0x80 [ 2258.301905] ? ext4_ext_truncate+0x250/0x250 [ 2258.302554] ? ext4_ext_truncate+0x250/0x250 [ 2258.303200] vfs_fallocate+0x48f/0xd00 [ 2258.303770] __x64_sys_fallocate+0xcf/0x140 [ 2258.304415] do_syscall_64+0x33/0x40 [ 2258.304949] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2258.305705] RIP: 0033:0x7f5d3b9e6b19 [ 2258.306249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2258.309019] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2258.310131] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2258.311173] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2258.312212] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.313277] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2258.314344] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:27:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {0x0}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2258.326365] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) 14:27:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x7, 0x4077, 0x8000) 14:27:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:14 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x0, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:27:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) [ 2258.435712] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {0x0}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:27:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) [ 2258.561380] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 12) 14:27:29 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:27:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {0x0}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:27:29 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 14:27:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x8, 0x4077, 0x8000) 14:27:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 9) 14:27:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2273.575050] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2273.583575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10685 comm=syz-executor.5 [ 2273.592091] FAULT_INJECTION: forcing a failure. [ 2273.592091] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.594821] CPU: 0 PID: 10684 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2273.596186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2273.597844] Call Trace: [ 2273.598374] dump_stack+0x107/0x167 [ 2273.599098] should_fail.cold+0x5/0xa [ 2273.599853] ? create_object.isra.0+0x3a/0xa20 [ 2273.600765] should_failslab+0x5/0x20 [ 2273.601516] kmem_cache_alloc+0x5b/0x310 [ 2273.602323] create_object.isra.0+0x3a/0xa20 14:27:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) [ 2273.603193] kmemleak_alloc_percpu+0xa0/0x100 [ 2273.604194] pcpu_alloc+0x4e2/0x1240 [ 2273.604974] cgroup_rstat_init+0x14f/0x1f0 [ 2273.605842] cgroup_mkdir+0x709/0xf50 [ 2273.606621] ? cgroup_destroy_locked+0x710/0x710 [ 2273.607592] kernfs_iop_mkdir+0x14d/0x1e0 [ 2273.608440] vfs_mkdir+0x493/0x700 [ 2273.609186] do_mkdirat+0x150/0x2b0 [ 2273.609932] ? user_path_create+0xf0/0xf0 [ 2273.610782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2273.611845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2273.612898] do_syscall_64+0x33/0x40 [ 2273.613653] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2273.614678] RIP: 0033:0x7f66172e4b19 [ 2273.615436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2273.619342] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2273.620920] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2273.622406] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2273.623894] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2273.625383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2273.626812] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2273.643207] FAULT_INJECTION: forcing a failure. [ 2273.643207] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.645161] CPU: 1 PID: 10685 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2273.645901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2273.646772] Call Trace: [ 2273.647056] dump_stack+0x107/0x167 [ 2273.647439] should_fail.cold+0x5/0xa [ 2273.647849] ? ext4_mb_new_blocks+0x64d/0x45b0 [ 2273.648322] should_failslab+0x5/0x20 [ 2273.648746] kmem_cache_alloc+0x5b/0x310 [ 2273.649260] ext4_mb_new_blocks+0x64d/0x45b0 [ 2273.649789] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2273.650502] ? mark_lock+0xf5/0x2df0 [ 2273.651005] ? ext4_discard_preallocations+0xd80/0xd80 [ 2273.651630] ? lock_chain_count+0x20/0x20 [ 2273.652060] ? ext4_get_branch+0x541/0x6d0 [ 2273.652513] ext4_ind_map_blocks+0x17de/0x2150 [ 2273.653003] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2273.653552] ? ext4_free_branches+0x680/0x680 [ 2273.654020] ? lock_acquire+0x197/0x470 [ 2273.654343] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2273.654442] ? lock_release+0x680/0x680 [ 2273.656275] ? lock_downgrade+0x6d0/0x6d0 [ 2273.656758] ? down_write+0xe0/0x160 [ 2273.657222] ? down_write_killable+0x180/0x180 [ 2273.657806] ext4_map_blocks+0x9ed/0x1940 [ 2273.658328] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2273.658895] ? trace_hardirqs_on+0x5b/0x180 [ 2273.659447] ? kmem_cache_alloc+0x2a6/0x310 [ 2273.660087] ext4_writepages+0x19bf/0x3350 [ 2273.660612] ? perf_output_begin_forward+0x6e5/0xb20 [ 2273.661192] ? mark_lock+0xf5/0x2df0 [ 2273.661644] ? lock_chain_count+0x20/0x20 [ 2273.662135] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2273.662729] ? __lock_acquire+0x1657/0x5b00 [ 2273.663210] ? lock_chain_count+0x20/0x20 [ 2273.663678] ? mark_held_locks+0x9e/0xe0 [ 2273.664132] ? __lock_acquire+0x1657/0x5b00 [ 2273.664626] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2273.665174] do_writepages+0xee/0x2a0 [ 2273.665629] ? page_writeback_cpu_online+0x20/0x20 [ 2273.666201] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2273.666806] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2273.667361] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2273.667940] ? ext4_fallocate+0x18d/0x3860 [ 2273.668445] filemap_write_and_wait_range+0x65/0x100 [ 2273.669022] ext4_punch_hole+0x178/0x1070 [ 2273.669485] ? downgrade_write+0x3a0/0x3a0 [ 2273.669979] ? down_write_killable+0x180/0x180 [ 2273.670510] ext4_fallocate+0xd8e/0x3860 [ 2273.670965] ? __x64_sys_fallocate+0xcf/0x140 [ 2273.671491] ? lock_release+0x680/0x680 [ 2273.671934] ? _cond_resched+0x12/0x80 [ 2273.672388] ? ext4_ext_truncate+0x250/0x250 [ 2273.672909] ? ext4_ext_truncate+0x250/0x250 [ 2273.673421] vfs_fallocate+0x48f/0xd00 [ 2273.673887] __x64_sys_fallocate+0xcf/0x140 [ 2273.674386] do_syscall_64+0x33/0x40 [ 2273.674837] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2273.675426] RIP: 0033:0x7f5d3b9e6b19 [ 2273.675876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2273.678159] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2273.679026] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2273.679822] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2273.680649] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2273.681460] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 2273.682274] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:27:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:30 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) 14:27:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x9, 0x4077, 0x8000) 14:27:30 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:27:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2273.850346] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2273.911635] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:43 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 14:27:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0xa, 0x4077, 0x8000) 14:27:43 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:27:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 10) 14:27:43 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2286.962831] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, 0x0, 0x86) 14:27:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2286.990032] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 13) [ 2287.011396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10729 comm=syz-executor.5 14:27:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, 0x0, 0x86) [ 2287.044782] FAULT_INJECTION: forcing a failure. [ 2287.044782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2287.046139] FAULT_INJECTION: forcing a failure. [ 2287.046139] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.047502] CPU: 0 PID: 10729 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2287.049820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.051503] Call Trace: [ 2287.052045] dump_stack+0x107/0x167 [ 2287.052809] should_fail.cold+0x5/0xa [ 2287.053591] __alloc_pages_nodemask+0x182/0x600 [ 2287.054557] ? lock_chain_count+0x20/0x20 [ 2287.055395] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2287.056627] alloc_pages_current+0x187/0x280 [ 2287.057537] allocate_slab+0x26f/0x380 [ 2287.058319] ___slab_alloc+0x470/0x700 [ 2287.059120] ? ext4_mb_new_blocks+0x64d/0x45b0 [ 2287.060046] ? mark_lock+0xf5/0x2df0 [ 2287.060809] ? ext4_mb_new_blocks+0x64d/0x45b0 [ 2287.061734] ? kmem_cache_alloc+0x301/0x310 [ 2287.062611] kmem_cache_alloc+0x301/0x310 [ 2287.063455] ext4_mb_new_blocks+0x64d/0x45b0 [ 2287.064332] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2287.065453] ? mark_lock+0xf5/0x2df0 [ 2287.066197] ? ext4_discard_preallocations+0xd80/0xd80 [ 2287.067260] ? lock_chain_count+0x20/0x20 [ 2287.068098] ? ext4_get_branch+0x541/0x6d0 [ 2287.068973] ext4_ind_map_blocks+0x17de/0x2150 [ 2287.069906] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2287.070978] ? ext4_free_branches+0x680/0x680 [ 2287.071886] ? lock_acquire+0x197/0x470 [ 2287.072697] ? lock_release+0x680/0x680 [ 2287.073514] ? lock_downgrade+0x6d0/0x6d0 [ 2287.074356] ? down_write+0xe0/0x160 [ 2287.075120] ? down_write_killable+0x180/0x180 [ 2287.076056] ext4_map_blocks+0x9ed/0x1940 [ 2287.076929] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2287.077837] ? trace_hardirqs_on+0x5b/0x180 [ 2287.078720] ? kmem_cache_alloc+0x2a6/0x310 [ 2287.079608] ext4_writepages+0x19bf/0x3350 [ 2287.080463] ? lock_acquire+0x197/0x470 [ 2287.081274] ? lock_downgrade+0x6d0/0x6d0 [ 2287.082131] ? lock_chain_count+0x20/0x20 [ 2287.082980] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2287.083963] ? mark_lock+0xf5/0x2df0 [ 2287.084723] ? lock_chain_count+0x20/0x20 [ 2287.085603] ? __lock_acquire+0x1657/0x5b00 [ 2287.086486] ? lock_chain_count+0x20/0x20 [ 2287.087327] ? __lock_acquire+0x1657/0x5b00 [ 2287.088207] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2287.089211] do_writepages+0xee/0x2a0 [ 2287.089997] ? page_writeback_cpu_online+0x20/0x20 [ 2287.090991] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2287.092066] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2287.093085] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2287.094163] ? ext4_fallocate+0x18d/0x3860 [ 2287.095047] filemap_write_and_wait_range+0x65/0x100 [ 2287.096077] ext4_punch_hole+0x178/0x1070 [ 2287.096934] ? downgrade_write+0x3a0/0x3a0 [ 2287.097784] ? down_write_killable+0x180/0x180 [ 2287.098726] ext4_fallocate+0xd8e/0x3860 [ 2287.099545] ? __x64_sys_fallocate+0xcf/0x140 [ 2287.100450] ? lock_release+0x680/0x680 [ 2287.101255] ? _cond_resched+0x12/0x80 [ 2287.102045] ? ext4_ext_truncate+0x250/0x250 [ 2287.102950] ? ext4_ext_truncate+0x250/0x250 [ 2287.103835] vfs_fallocate+0x48f/0xd00 [ 2287.104625] __x64_sys_fallocate+0xcf/0x140 [ 2287.105519] do_syscall_64+0x33/0x40 [ 2287.106401] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2287.107700] RIP: 0033:0x7f5d3b9e6b19 [ 2287.108531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.112291] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2287.113849] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2287.115286] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2287.116724] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2287.118194] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.119643] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2287.121145] CPU: 1 PID: 10738 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2287.121937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.122827] Call Trace: [ 2287.123122] dump_stack+0x107/0x167 [ 2287.123519] should_fail.cold+0x5/0xa [ 2287.123947] ? create_object.isra.0+0x3a/0xa20 [ 2287.124469] should_failslab+0x5/0x20 [ 2287.124891] kmem_cache_alloc+0x5b/0x310 [ 2287.125335] ? mark_held_locks+0x9e/0xe0 [ 2287.125773] create_object.isra.0+0x3a/0xa20 [ 2287.126240] kmemleak_alloc_percpu+0xa0/0x100 [ 2287.126717] pcpu_alloc+0x4e2/0x1240 [ 2287.127122] cgroup_rstat_init+0x14f/0x1f0 [ 2287.127578] cgroup_mkdir+0x709/0xf50 [ 2287.127997] ? cgroup_destroy_locked+0x710/0x710 [ 2287.128503] kernfs_iop_mkdir+0x14d/0x1e0 [ 2287.128974] vfs_mkdir+0x493/0x700 [ 2287.129351] do_mkdirat+0x150/0x2b0 [ 2287.129743] ? user_path_create+0xf0/0xf0 [ 2287.130182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.130753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2287.131304] do_syscall_64+0x33/0x40 [ 2287.131707] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2287.132276] RIP: 0033:0x7f66172e4b19 [ 2287.132696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.134646] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2287.135487] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2287.136259] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2287.137017] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2287.137808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.138563] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:27:43 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:27:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0xc, 0x4077, 0x8000) 14:27:43 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5f", 0xe}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2287.213414] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:43 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) 14:27:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 11) 14:27:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, 0x0, 0x86) [ 2287.265019] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 14) [ 2287.303015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10756 comm=syz-executor.5 [ 2287.323847] FAULT_INJECTION: forcing a failure. [ 2287.323847] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.325627] CPU: 1 PID: 10756 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2287.326377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.327261] Call Trace: [ 2287.327567] dump_stack+0x107/0x167 [ 2287.327966] should_fail.cold+0x5/0xa [ 2287.328377] ? __es_insert_extent+0x3a9/0x12f0 [ 2287.328886] should_failslab+0x5/0x20 [ 2287.329288] kmem_cache_alloc+0x5b/0x310 [ 2287.329735] __es_insert_extent+0x3a9/0x12f0 [ 2287.330212] ? __es_tree_search.isra.0+0x1af/0x220 [ 2287.330759] __es_remove_extent+0x9f5/0x15a0 [ 2287.331254] ? ext4_es_scan+0x420/0x420 [ 2287.331688] ? lock_release+0x680/0x680 [ 2287.332132] ? do_raw_write_lock+0x11a/0x280 [ 2287.332607] ? do_raw_read_unlock+0x70/0x70 [ 2287.333088] ext4_es_insert_extent+0x230/0xb10 [ 2287.333595] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2287.334065] ? down_write+0xe0/0x160 [ 2287.334463] ? down_write_killable+0x180/0x180 [ 2287.334958] ext4_map_blocks+0x8e1/0x1940 [ 2287.335421] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2287.335910] ? trace_hardirqs_on+0x5b/0x180 [ 2287.336370] ? kmem_cache_alloc+0x2a6/0x310 [ 2287.336852] ext4_writepages+0x19bf/0x3350 [ 2287.337314] ? lock_acquire+0x197/0x470 [ 2287.337763] ? lock_downgrade+0x6d0/0x6d0 [ 2287.338213] ? lock_chain_count+0x20/0x20 [ 2287.338681] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2287.339220] ? mark_lock+0xf5/0x2df0 [ 2287.339642] ? lock_chain_count+0x20/0x20 [ 2287.340106] ? __lock_acquire+0x1657/0x5b00 [ 2287.340561] ? lock_chain_count+0x20/0x20 [ 2287.341034] ? __lock_acquire+0x1657/0x5b00 [ 2287.341505] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2287.342041] do_writepages+0xee/0x2a0 [ 2287.342458] ? page_writeback_cpu_online+0x20/0x20 [ 2287.342975] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2287.343548] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2287.344075] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2287.344641] ? ext4_fallocate+0x18d/0x3860 [ 2287.345128] filemap_write_and_wait_range+0x65/0x100 [ 2287.345671] ext4_punch_hole+0x178/0x1070 [ 2287.346112] ? downgrade_write+0x3a0/0x3a0 [ 2287.346588] ? down_write_killable+0x180/0x180 [ 2287.347093] ext4_fallocate+0xd8e/0x3860 [ 2287.347543] ? __x64_sys_fallocate+0xcf/0x140 [ 2287.348033] ? lock_release+0x680/0x680 [ 2287.348464] ? _cond_resched+0x12/0x80 [ 2287.348903] ? ext4_ext_truncate+0x250/0x250 [ 2287.349372] ? ext4_ext_truncate+0x250/0x250 [ 2287.349837] vfs_fallocate+0x48f/0xd00 [ 2287.350260] __x64_sys_fallocate+0xcf/0x140 [ 2287.350736] do_syscall_64+0x33/0x40 [ 2287.351140] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2287.351711] RIP: 0033:0x7f5d3b9e6b19 [ 2287.352115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.354108] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2287.354920] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2287.355679] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2287.356454] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2287.357225] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.357989] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2287.367395] FAULT_INJECTION: forcing a failure. [ 2287.367395] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.368667] CPU: 1 PID: 10758 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2287.369425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.370346] Call Trace: [ 2287.370636] dump_stack+0x107/0x167 [ 2287.371034] should_fail.cold+0x5/0xa [ 2287.371446] ? create_object.isra.0+0x3a/0xa20 [ 2287.371955] should_failslab+0x5/0x20 [ 2287.372372] kmem_cache_alloc+0x5b/0x310 [ 2287.372817] ? mark_held_locks+0x9e/0xe0 [ 2287.373260] create_object.isra.0+0x3a/0xa20 [ 2287.373738] kmemleak_alloc_percpu+0xa0/0x100 [ 2287.374228] pcpu_alloc+0x4e2/0x1240 [ 2287.374647] cgroup_rstat_init+0x14f/0x1f0 [ 2287.375104] cgroup_mkdir+0x709/0xf50 [ 2287.375530] ? cgroup_destroy_locked+0x710/0x710 [ 2287.376049] kernfs_iop_mkdir+0x14d/0x1e0 [ 2287.376498] vfs_mkdir+0x493/0x700 [ 2287.376899] do_mkdirat+0x150/0x2b0 [ 2287.377294] ? user_path_create+0xf0/0xf0 [ 2287.377739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.378291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2287.378863] do_syscall_64+0x33/0x40 [ 2287.379256] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2287.379822] RIP: 0033:0x7f66172e4b19 [ 2287.380217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.382206] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2287.383014] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2287.383771] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2287.384532] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2287.385312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.386086] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:27:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0xd, 0x4077, 0x8000) [ 2287.486916] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2287.518922] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:27:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0xf, 0x4077, 0x8000) 14:27:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 12) 14:27:56 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:27:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x0) 14:27:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 15) 14:27:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5f", 0xe}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:27:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) [ 2300.253576] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2300.280162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10787 comm=syz-executor.5 14:27:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) [ 2300.306052] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2300.331085] FAULT_INJECTION: forcing a failure. [ 2300.331085] name failslab, interval 1, probability 0, space 0, times 0 [ 2300.334018] CPU: 1 PID: 10788 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2300.335475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2300.337239] Call Trace: [ 2300.337802] dump_stack+0x107/0x167 [ 2300.338570] should_fail.cold+0x5/0xa [ 2300.339369] ? create_object.isra.0+0x3a/0xa20 [ 2300.340323] should_failslab+0x5/0x20 [ 2300.341135] kmem_cache_alloc+0x5b/0x310 [ 2300.341988] ? lock_acquire+0x197/0x470 [ 2300.342849] create_object.isra.0+0x3a/0xa20 [ 2300.343784] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2300.344870] __kmalloc_track_caller+0x177/0x370 [ 2300.345862] ? kstrdup_const+0x53/0x80 [ 2300.346678] kstrdup+0x36/0x70 14:27:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x0) [ 2300.347350] kstrdup_const+0x53/0x80 [ 2300.348302] __kernfs_new_node+0x9d/0x860 [ 2300.349184] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2300.350184] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2300.351166] ? pcpu_alloc+0x12a/0x1240 [ 2300.351989] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2300.353088] kernfs_create_dir_ns+0x9c/0x230 [ 2300.354018] cgroup_mkdir+0x318/0xf50 [ 2300.354827] ? cgroup_destroy_locked+0x710/0x710 [ 2300.355815] kernfs_iop_mkdir+0x14d/0x1e0 [ 2300.356697] vfs_mkdir+0x493/0x700 [ 2300.357456] do_mkdirat+0x150/0x2b0 [ 2300.358223] ? user_path_create+0xf0/0xf0 [ 2300.359098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2300.360200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2300.361285] do_syscall_64+0x33/0x40 [ 2300.362067] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2300.363140] RIP: 0033:0x7f66172e4b19 [ 2300.363915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.367735] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2300.369319] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2300.370796] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2300.372274] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.373744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2300.375219] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2300.384419] FAULT_INJECTION: forcing a failure. [ 2300.384419] name failslab, interval 1, probability 0, space 0, times 0 [ 2300.387689] CPU: 1 PID: 10787 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2300.389125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2300.390816] Call Trace: [ 2300.391348] dump_stack+0x107/0x167 [ 2300.392086] should_fail.cold+0x5/0xa [ 2300.392865] ? create_object.isra.0+0x3a/0xa20 [ 2300.393801] should_failslab+0x5/0x20 [ 2300.394562] kmem_cache_alloc+0x5b/0x310 [ 2300.395388] ? ext4_expand_extra_isize+0x5a0/0x5a0 [ 2300.396396] create_object.isra.0+0x3a/0xa20 [ 2300.397309] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2300.398357] kmem_cache_alloc+0x159/0x310 [ 2300.399209] __es_insert_extent+0x3a9/0x12f0 [ 2300.400123] ? __es_tree_search.isra.0+0x1af/0x220 [ 2300.401118] __es_remove_extent+0x9f5/0x15a0 [ 2300.402029] ? ext4_es_scan+0x420/0x420 [ 2300.402839] ? lock_release+0x680/0x680 [ 2300.403654] ? do_raw_write_lock+0x11a/0x280 [ 2300.404535] ? do_raw_read_unlock+0x70/0x70 [ 2300.405407] ext4_es_insert_extent+0x230/0xb10 [ 2300.406325] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2300.407201] ? down_write+0xe0/0x160 [ 2300.407945] ? down_write_killable+0x180/0x180 14:27:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) [ 2300.408868] ext4_map_blocks+0x8e1/0x1940 [ 2300.409851] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2300.410750] ? trace_hardirqs_on+0x5b/0x180 [ 2300.411661] ? kmem_cache_alloc+0x2a6/0x310 [ 2300.412562] ext4_writepages+0x19bf/0x3350 [ 2300.413448] ? lock_acquire+0x197/0x470 [ 2300.414284] ? lock_downgrade+0x6d0/0x6d0 [ 2300.415162] ? lock_chain_count+0x20/0x20 [ 2300.416060] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2300.417206] ? mark_lock+0xf5/0x2df0 [ 2300.418072] ? lock_chain_count+0x20/0x20 [ 2300.419035] ? __lock_acquire+0x1657/0x5b00 [ 2300.420055] ? lock_chain_count+0x20/0x20 [ 2300.421023] ? __lock_acquire+0x1657/0x5b00 [ 2300.422041] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2300.423159] do_writepages+0xee/0x2a0 [ 2300.424040] ? page_writeback_cpu_online+0x20/0x20 [ 2300.425171] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2300.426397] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2300.427547] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2300.428757] ? ext4_fallocate+0x18d/0x3860 [ 2300.429751] filemap_write_and_wait_range+0x65/0x100 [ 2300.430905] ext4_punch_hole+0x178/0x1070 [ 2300.431848] ? downgrade_write+0x3a0/0x3a0 [ 2300.432818] ? down_write_killable+0x180/0x180 [ 2300.433885] ext4_fallocate+0xd8e/0x3860 [ 2300.434812] ? __x64_sys_fallocate+0xcf/0x140 [ 2300.435843] ? lock_release+0x680/0x680 [ 2300.436745] ? _cond_resched+0x12/0x80 [ 2300.437665] ? ext4_ext_truncate+0x250/0x250 [ 2300.438683] ? ext4_ext_truncate+0x250/0x250 [ 2300.439692] vfs_fallocate+0x48f/0xd00 [ 2300.440586] __x64_sys_fallocate+0xcf/0x140 [ 2300.441576] do_syscall_64+0x33/0x40 [ 2300.442423] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2300.443583] RIP: 0033:0x7f5d3b9e6b19 [ 2300.444429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2300.448598] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2300.450326] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2300.451934] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2300.453530] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.455128] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2300.456717] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:27:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:27:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 14:27:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5f", 0xe}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:28:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) 14:28:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd", 0x15}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:28:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:28:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x0) 14:28:09 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x0, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:28:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 16) 14:28:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 13) 14:28:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x10, 0x4077, 0x8000) [ 2312.768401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10824 comm=syz-executor.5 [ 2312.782390] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2312.819024] FAULT_INJECTION: forcing a failure. [ 2312.819024] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.821464] CPU: 0 PID: 10824 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2312.822870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2312.824540] Call Trace: [ 2312.825097] dump_stack+0x107/0x167 [ 2312.825841] should_fail.cold+0x5/0xa [ 2312.826612] ? __es_insert_extent+0x3a9/0x12f0 [ 2312.827532] should_failslab+0x5/0x20 [ 2312.828298] kmem_cache_alloc+0x5b/0x310 [ 2312.829136] __es_insert_extent+0x3a9/0x12f0 [ 2312.830043] ext4_es_insert_extent+0x2dc/0xb10 [ 2312.830975] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2312.831863] ? down_write+0xe0/0x160 [ 2312.832614] ? down_write_killable+0x180/0x180 [ 2312.833554] ext4_map_blocks+0x8e1/0x1940 [ 2312.834404] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2312.835304] ? trace_hardirqs_on+0x5b/0x180 [ 2312.836187] ? kmem_cache_alloc+0x2a6/0x310 [ 2312.837089] ext4_writepages+0x19bf/0x3350 [ 2312.837966] ? lock_acquire+0x197/0x470 [ 2312.838780] ? perf_event_update_userpage+0x4aa/0x7f0 [ 2312.839823] ? lock_downgrade+0x6d0/0x6d0 [ 2312.840068] FAULT_INJECTION: forcing a failure. [ 2312.840068] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.840658] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2312.840783] ? clockevents_program_event+0x131/0x360 [ 2312.840809] ? perf_event_update_userpage+0x4d3/0x7f0 [ 2312.840827] ? perf_event_task_disable+0x390/0x390 [ 2312.840858] ? mark_lock+0xf5/0x2df0 [ 2312.840885] ? lock_chain_count+0x20/0x20 [ 2312.849036] ? event_sched_in+0x5b1/0xaa0 [ 2312.849906] ? __lock_acquire+0x1657/0x5b00 [ 2312.850787] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2312.851773] do_writepages+0xee/0x2a0 [ 2312.852546] ? page_writeback_cpu_online+0x20/0x20 [ 2312.853545] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2312.854597] ? __lock_acquire+0x1657/0x5b00 [ 2312.855481] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2312.856493] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2312.857588] ? ext4_fallocate+0x18d/0x3860 [ 2312.858459] filemap_write_and_wait_range+0x65/0x100 [ 2312.859480] ext4_punch_hole+0x178/0x1070 [ 2312.860351] ? downgrade_write+0x3a0/0x3a0 [ 2312.861209] ? down_write_killable+0x180/0x180 [ 2312.862141] ext4_fallocate+0xd8e/0x3860 [ 2312.862959] ? __x64_sys_fallocate+0xcf/0x140 [ 2312.863868] ? lock_release+0x680/0x680 [ 2312.864664] ? _cond_resched+0x12/0x80 [ 2312.865466] ? ext4_ext_truncate+0x250/0x250 [ 2312.866362] ? ext4_ext_truncate+0x250/0x250 [ 2312.867245] vfs_fallocate+0x48f/0xd00 [ 2312.868037] __x64_sys_fallocate+0xcf/0x140 [ 2312.868914] do_syscall_64+0x33/0x40 [ 2312.869681] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2312.870711] RIP: 0033:0x7f5d3b9e6b19 [ 2312.871459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2312.875202] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2312.876738] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2312.878195] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2312.879629] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.881063] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2312.882497] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2312.883968] CPU: 1 PID: 10825 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2312.885514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2312.887316] Call Trace: [ 2312.887906] dump_stack+0x107/0x167 [ 2312.888709] should_fail.cold+0x5/0xa [ 2312.889560] ? create_object.isra.0+0x3a/0xa20 [ 2312.890552] should_failslab+0x5/0x20 [ 2312.891385] kmem_cache_alloc+0x5b/0x310 [ 2312.892276] ? mark_held_locks+0x9e/0xe0 [ 2312.893167] create_object.isra.0+0x3a/0xa20 [ 2312.894196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2312.895440] __kmalloc_track_caller+0x177/0x370 [ 2312.896553] ? security_context_to_sid_core+0x7fc/0x890 [ 2312.897736] kstrdup+0x36/0x70 [ 2312.898429] security_context_to_sid_core+0x7fc/0x890 [ 2312.899561] ? do_raw_spin_unlock+0x4f/0x220 [ 2312.900506] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2312.901706] ? simple_xattr_get+0x10a/0x180 [ 2312.902658] ? kernfs_vfs_xattr_set+0xb0/0xb0 [ 2312.903637] ? kernfs_vfs_xattr_get+0xb6/0xe0 [ 2312.904619] ? __vfs_getxattr+0xeb/0x150 [ 2312.905516] ? __vfs_setxattr+0x180/0x180 [ 2312.906419] security_context_to_sid_default+0x3a/0x50 [ 2312.907577] inode_doinit_use_xattr+0x110/0x350 [ 2312.908608] inode_doinit_with_dentry+0x107e/0x1240 [ 2312.909730] ? selinux_file_lock+0x280/0x280 [ 2312.910696] ? kernfs_get_inode+0x388/0x520 [ 2312.911645] ? lock_downgrade+0x6d0/0x6d0 [ 2312.912550] selinux_d_instantiate+0x23/0x30 [ 2312.913522] security_d_instantiate+0x56/0xe0 [ 2312.914508] d_splice_alias+0x8c/0xc60 [ 2312.915363] ? _raw_spin_unlock+0x1a/0x30 [ 2312.916271] kernfs_iop_lookup+0x1ac/0x220 [ 2312.917208] __lookup_hash+0x121/0x190 [ 2312.918054] filename_create+0x186/0x4a0 [ 2312.918952] ? filename_parentat+0x570/0x570 [ 2312.919902] ? getname_flags.part.0+0x1dd/0x4f0 [ 2312.920936] do_mkdirat+0xa2/0x2b0 [ 2312.921725] ? user_path_create+0xf0/0xf0 [ 2312.922629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2312.923778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2312.924904] do_syscall_64+0x33/0x40 [ 2312.925727] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2312.926847] RIP: 0033:0x7f66172e4b19 [ 2312.927662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2312.931662] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2312.933344] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2312.934887] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2312.936435] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.937999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2312.939544] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2312.948988] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:28:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 14:28:24 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x0, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:28:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 14) 14:28:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:28:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x10, 0x4077, 0x8000) 14:28:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd", 0x15}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:28:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0xc8, 0x4077, 0x8000) [ 2328.335313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10845 comm=syz-executor.5 14:28:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 17) 14:28:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) [ 2328.373109] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 2328.381370] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2328.393876] FAULT_INJECTION: forcing a failure. [ 2328.393876] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.396909] CPU: 1 PID: 10845 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2328.398543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2328.400465] Call Trace: [ 2328.401093] dump_stack+0x107/0x167 [ 2328.401989] should_fail.cold+0x5/0xa [ 2328.402882] ? create_object.isra.0+0x3a/0xa20 [ 2328.403963] should_failslab+0x5/0x20 [ 2328.404853] kmem_cache_alloc+0x5b/0x310 [ 2328.405846] create_object.isra.0+0x3a/0xa20 [ 2328.406888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2328.408098] kmem_cache_alloc+0x159/0x310 [ 2328.409090] __es_insert_extent+0x3a9/0x12f0 [ 2328.410162] ext4_es_insert_extent+0x2dc/0xb10 [ 2328.411226] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2328.412253] ? down_write+0xe0/0x160 [ 2328.413128] ? down_write_killable+0x180/0x180 [ 2328.414252] ext4_map_blocks+0x8e1/0x1940 [ 2328.415244] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2328.416291] ? trace_hardirqs_on+0x5b/0x180 [ 2328.417319] ? kmem_cache_alloc+0x2a6/0x310 [ 2328.418355] ext4_writepages+0x19bf/0x3350 [ 2328.419378] ? lock_acquire+0x197/0x470 [ 2328.420341] ? lock_downgrade+0x6d0/0x6d0 [ 2328.421373] ? lock_chain_count+0x20/0x20 [ 2328.422351] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2328.423541] ? mark_lock+0xf5/0x2df0 [ 2328.424437] ? lock_chain_count+0x20/0x20 [ 2328.425468] ? __lock_acquire+0x1657/0x5b00 [ 2328.426506] ? lock_chain_count+0x20/0x20 [ 2328.427525] ? __lock_acquire+0x1657/0x5b00 [ 2328.428572] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2328.429736] do_writepages+0xee/0x2a0 [ 2328.430530] ? page_writeback_cpu_online+0x20/0x20 [ 2328.431552] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2328.432634] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2328.433670] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2328.434748] ? ext4_fallocate+0x18d/0x3860 [ 2328.435639] filemap_write_and_wait_range+0x65/0x100 [ 2328.436690] ext4_punch_hole+0x178/0x1070 [ 2328.437555] ? downgrade_write+0x3a0/0x3a0 [ 2328.438422] ? down_write_killable+0x180/0x180 [ 2328.439384] ext4_fallocate+0xd8e/0x3860 [ 2328.440210] ? __x64_sys_fallocate+0xcf/0x140 [ 2328.441147] ? lock_release+0x680/0x680 [ 2328.441986] ? _cond_resched+0x12/0x80 [ 2328.442822] ? ext4_ext_truncate+0x250/0x250 [ 2328.443739] ? ext4_ext_truncate+0x250/0x250 [ 2328.444669] vfs_fallocate+0x48f/0xd00 [ 2328.445499] __x64_sys_fallocate+0xcf/0x140 [ 2328.446413] do_syscall_64+0x33/0x40 [ 2328.447188] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2328.448266] RIP: 0033:0x7f5d3b9e6b19 [ 2328.449051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2328.452941] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2328.454554] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2328.456065] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2328.457617] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2328.457781] FAULT_INJECTION: forcing a failure. 14:28:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2328.457781] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.459123] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2328.459134] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2328.466316] CPU: 0 PID: 10861 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2328.467702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2328.469367] Call Trace: [ 2328.469906] dump_stack+0x107/0x167 [ 2328.470629] should_fail.cold+0x5/0xa [ 2328.471399] ? __kernfs_new_node+0xd4/0x860 [ 2328.472254] should_failslab+0x5/0x20 [ 2328.473015] kmem_cache_alloc+0x5b/0x310 [ 2328.473836] __kernfs_new_node+0xd4/0x860 [ 2328.474677] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2328.475610] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2328.476550] ? pcpu_alloc+0x12a/0x1240 [ 2328.477341] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2328.478391] kernfs_create_dir_ns+0x9c/0x230 [ 2328.479288] cgroup_mkdir+0x318/0xf50 [ 2328.480058] ? cgroup_destroy_locked+0x710/0x710 [ 2328.481007] kernfs_iop_mkdir+0x14d/0x1e0 [ 2328.481851] vfs_mkdir+0x493/0x700 [ 2328.482562] do_mkdirat+0x150/0x2b0 [ 2328.483297] ? user_path_create+0xf0/0xf0 [ 2328.484128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2328.485175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2328.486226] do_syscall_64+0x33/0x40 [ 2328.486980] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2328.488001] RIP: 0033:0x7f66172e4b19 [ 2328.488745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2328.492617] RSP: 002b:00007f6614839188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2328.494320] RAX: ffffffffffffffda RBX: 00007f66173f8020 RCX: 00007f66172e4b19 [ 2328.495897] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2328.497485] RBP: 00007f66148391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2328.499048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2328.500514] R13: 00007ffd9d4c8daf R14: 00007f6614839300 R15: 0000000000022000 14:28:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) 14:28:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd", 0x15}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:28:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:28:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 18) 14:28:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e", 0x18}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2328.697860] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2328.758134] FAULT_INJECTION: forcing a failure. [ 2328.758134] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.761232] CPU: 1 PID: 10879 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2328.762715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2328.764436] Call Trace: [ 2328.765001] dump_stack+0x107/0x167 [ 2328.765774] should_fail.cold+0x5/0xa [ 2328.766566] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2328.767752] should_failslab+0x5/0x20 [ 2328.768535] kmem_cache_alloc+0x5b/0x310 [ 2328.769371] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2328.770517] radix_tree_extend+0x231/0x490 [ 2328.771378] idr_get_free+0x623/0x8f0 [ 2328.772182] idr_alloc_u32+0x170/0x2d0 [ 2328.772985] ? __fprop_inc_percpu_max+0x130/0x130 [ 2328.773994] ? lock_acquire+0x197/0x470 [ 2328.774807] ? __kernfs_new_node+0xff/0x860 [ 2328.775710] idr_alloc_cyclic+0x102/0x230 [ 2328.776557] ? idr_alloc+0x130/0x130 [ 2328.777319] ? rwlock_bug.part.0+0x90/0x90 [ 2328.778204] __kernfs_new_node+0x117/0x860 [ 2328.779078] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2328.780046] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2328.781018] ? pcpu_alloc+0x12a/0x1240 [ 2328.781841] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2328.783018] kernfs_create_dir_ns+0x9c/0x230 [ 2328.784153] cgroup_mkdir+0x318/0xf50 [ 2328.785105] ? cgroup_destroy_locked+0x710/0x710 [ 2328.786311] kernfs_iop_mkdir+0x14d/0x1e0 [ 2328.787367] vfs_mkdir+0x493/0x700 [ 2328.788271] do_mkdirat+0x150/0x2b0 [ 2328.789189] ? user_path_create+0xf0/0xf0 [ 2328.790189] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2328.791255] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2328.792318] do_syscall_64+0x33/0x40 [ 2328.793086] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2328.794178] RIP: 0033:0x7f66172e4b19 [ 2328.794945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2328.798737] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2328.800296] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2328.801782] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2328.803226] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2328.804676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2328.806128] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:28:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 19) 14:28:38 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) 14:28:38 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e", 0x18}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:28:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:28:38 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:28:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0xc076, 0x8000) 14:28:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 15) 14:28:38 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x0, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 2342.613323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10900 comm=syz-executor.5 [ 2342.616747] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2342.673185] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2342.673403] FAULT_INJECTION: forcing a failure. [ 2342.673403] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.677873] CPU: 1 PID: 10900 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2342.679490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2342.681462] Call Trace: [ 2342.682087] dump_stack+0x107/0x167 [ 2342.682938] should_fail.cold+0x5/0xa [ 2342.683824] ? mempool_alloc+0x148/0x360 [ 2342.684759] ? mempool_free_pages+0x20/0x20 [ 2342.685769] should_failslab+0x5/0x20 [ 2342.686650] kmem_cache_alloc+0x5b/0x310 [ 2342.687595] ? mempool_free_pages+0x20/0x20 [ 2342.688591] mempool_alloc+0x148/0x360 [ 2342.689519] ? mempool_resize+0x7d0/0x7d0 [ 2342.690496] ? __test_set_page_writeback+0x160/0xbb0 [ 2342.691691] bio_alloc_bioset+0x36e/0x600 [ 2342.692666] ? bvec_alloc+0x2f0/0x2f0 [ 2342.693557] ? invalid_page_referenced_vma+0x570/0x570 [ 2342.694776] ext4_bio_write_page+0x9ba/0x1390 [ 2342.695826] mpage_submit_page+0x14b/0x260 [ 2342.696808] ext4_writepages+0x1f2e/0x3350 [ 2342.697838] ? lock_chain_count+0x20/0x20 [ 2342.698800] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2342.699948] ? lock_chain_count+0x20/0x20 [ 2342.700927] ? __lock_acquire+0x1657/0x5b00 [ 2342.702127] ? __lock_acquire+0x1657/0x5b00 [ 2342.703145] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2342.704292] do_writepages+0xee/0x2a0 [ 2342.705224] ? page_writeback_cpu_online+0x20/0x20 [ 2342.706403] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2342.707636] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2342.708792] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2342.710045] ? ext4_fallocate+0x18d/0x3860 [ 2342.711046] filemap_write_and_wait_range+0x65/0x100 [ 2342.712227] ext4_punch_hole+0x178/0x1070 [ 2342.713216] ? downgrade_write+0x3a0/0x3a0 [ 2342.714225] ? down_write_killable+0x180/0x180 [ 2342.715298] ext4_fallocate+0xd8e/0x3860 [ 2342.716247] ? __x64_sys_fallocate+0xcf/0x140 [ 2342.717283] ? lock_release+0x680/0x680 [ 2342.718219] ? _cond_resched+0x12/0x80 [ 2342.719125] ? ext4_ext_truncate+0x250/0x250 [ 2342.720146] ? ext4_ext_truncate+0x250/0x250 [ 2342.721173] vfs_fallocate+0x48f/0xd00 [ 2342.722106] __x64_sys_fallocate+0xcf/0x140 [ 2342.723123] do_syscall_64+0x33/0x40 [ 2342.723993] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2342.725201] RIP: 0033:0x7f5d3b9e6b19 [ 2342.726075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.730360] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2342.732123] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2342.733768] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2342.735401] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2342.737034] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2342.738691] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2342.749966] FAULT_INJECTION: forcing a failure. [ 2342.749966] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.753028] CPU: 1 PID: 10903 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2342.754636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2342.756539] Call Trace: [ 2342.757158] dump_stack+0x107/0x167 [ 2342.758013] should_fail.cold+0x5/0xa [ 2342.758889] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2342.760203] should_failslab+0x5/0x20 [ 2342.761074] kmem_cache_alloc+0x5b/0x310 [ 2342.762036] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2342.763330] radix_tree_extend+0x231/0x490 [ 2342.764323] idr_get_free+0x623/0x8f0 [ 2342.765221] idr_alloc_u32+0x170/0x2d0 [ 2342.766128] ? __fprop_inc_percpu_max+0x130/0x130 [ 2342.767243] ? lock_acquire+0x197/0x470 [ 2342.768164] ? __kernfs_new_node+0xff/0x860 [ 2342.769177] idr_alloc_cyclic+0x102/0x230 [ 2342.770166] ? idr_alloc+0x130/0x130 [ 2342.771038] ? rwlock_bug.part.0+0x90/0x90 [ 2342.772041] __kernfs_new_node+0x117/0x860 [ 2342.773027] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2342.774136] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2342.775250] ? pcpu_alloc+0x12a/0x1240 [ 2342.776165] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2342.777379] kernfs_create_dir_ns+0x9c/0x230 [ 2342.778453] cgroup_mkdir+0x318/0xf50 [ 2342.779358] ? cgroup_destroy_locked+0x710/0x710 [ 2342.780474] kernfs_iop_mkdir+0x14d/0x1e0 [ 2342.781481] vfs_mkdir+0x493/0x700 [ 2342.782333] do_mkdirat+0x150/0x2b0 [ 2342.783195] ? user_path_create+0xf0/0xf0 [ 2342.784181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2342.785440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2342.786669] do_syscall_64+0x33/0x40 [ 2342.787570] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2342.788809] RIP: 0033:0x7f66172e4b19 [ 2342.789709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.793892] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2342.795451] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2342.796919] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2342.798402] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2342.799848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2342.801324] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:28:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) 14:28:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:28:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0xfdef, 0x8000) 14:28:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e", 0x18}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2342.901665] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:28:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 14:28:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2342.973815] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:28:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 20) 14:28:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 16) 14:28:39 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x0, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 2343.103740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10931 comm=syz-executor.5 [ 2343.111829] FAULT_INJECTION: forcing a failure. [ 2343.111829] name failslab, interval 1, probability 0, space 0, times 0 [ 2343.114842] CPU: 1 PID: 10929 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2343.116229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2343.117895] Call Trace: [ 2343.118440] dump_stack+0x107/0x167 [ 2343.119182] should_fail.cold+0x5/0xa [ 2343.119958] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2343.121116] should_failslab+0x5/0x20 [ 2343.121904] kmem_cache_alloc+0x5b/0x310 [ 2343.122729] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2343.123856] idr_get_free+0x4b5/0x8f0 [ 2343.124639] idr_alloc_u32+0x170/0x2d0 [ 2343.125433] ? __fprop_inc_percpu_max+0x130/0x130 [ 2343.126429] ? lock_acquire+0x197/0x470 [ 2343.127229] ? __kernfs_new_node+0xff/0x860 [ 2343.128127] idr_alloc_cyclic+0x102/0x230 [ 2343.128962] ? idr_alloc+0x130/0x130 [ 2343.129738] ? rwlock_bug.part.0+0x90/0x90 [ 2343.130597] __kernfs_new_node+0x117/0x860 [ 2343.131462] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2343.132399] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2343.133355] ? pcpu_alloc+0x12a/0x1240 [ 2343.134150] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2343.135177] kernfs_create_dir_ns+0x9c/0x230 [ 2343.136048] cgroup_mkdir+0x318/0xf50 [ 2343.136804] ? cgroup_destroy_locked+0x710/0x710 [ 2343.137752] kernfs_iop_mkdir+0x14d/0x1e0 [ 2343.138570] vfs_mkdir+0x493/0x700 [ 2343.139282] do_mkdirat+0x150/0x2b0 [ 2343.140004] ? user_path_create+0xf0/0xf0 [ 2343.140829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2343.141934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2343.142982] do_syscall_64+0x33/0x40 [ 2343.143735] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2343.144772] RIP: 0033:0x7f66172e4b19 [ 2343.145539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2343.149259] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2343.150810] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2343.152250] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2343.153716] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2343.155154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2343.156596] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2343.206915] FAULT_INJECTION: forcing a failure. [ 2343.206915] name failslab, interval 1, probability 0, space 0, times 0 [ 2343.209739] CPU: 1 PID: 10931 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2343.211149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2343.212855] Call Trace: [ 2343.213403] dump_stack+0x107/0x167 [ 2343.214172] should_fail.cold+0x5/0xa [ 2343.214960] ? create_object.isra.0+0x3a/0xa20 [ 2343.215901] should_failslab+0x5/0x20 [ 2343.216695] kmem_cache_alloc+0x5b/0x310 [ 2343.217539] create_object.isra.0+0x3a/0xa20 [ 2343.218436] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2343.219485] kmem_cache_alloc+0x159/0x310 [ 2343.220348] ? mempool_free_pages+0x20/0x20 [ 2343.221238] mempool_alloc+0x148/0x360 [ 2343.222073] ? mempool_resize+0x7d0/0x7d0 [ 2343.222945] ? __test_set_page_writeback+0x160/0xbb0 [ 2343.223989] bio_alloc_bioset+0x36e/0x600 [ 2343.224838] ? bvec_alloc+0x2f0/0x2f0 [ 2343.225681] ? invalid_page_referenced_vma+0x570/0x570 [ 2343.226777] ext4_bio_write_page+0x9ba/0x1390 [ 2343.227725] mpage_submit_page+0x14b/0x260 [ 2343.228597] ext4_writepages+0x1f2e/0x3350 [ 2343.229527] ? lock_chain_count+0x20/0x20 [ 2343.230373] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2343.231371] ? lock_chain_count+0x20/0x20 [ 2343.232242] ? __lock_acquire+0x1657/0x5b00 [ 2343.233129] ? __lock_acquire+0x1657/0x5b00 [ 2343.234108] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2343.235120] do_writepages+0xee/0x2a0 [ 2343.235917] ? page_writeback_cpu_online+0x20/0x20 [ 2343.236921] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2343.238049] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2343.239082] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2343.240186] ? ext4_fallocate+0x18d/0x3860 [ 2343.241062] filemap_write_and_wait_range+0x65/0x100 [ 2343.242099] ext4_punch_hole+0x178/0x1070 [ 2343.242956] ? downgrade_write+0x3a0/0x3a0 [ 2343.243808] ? down_write_killable+0x180/0x180 [ 2343.244758] ext4_fallocate+0xd8e/0x3860 [ 2343.245592] ? __x64_sys_fallocate+0xcf/0x140 [ 2343.246518] ? lock_release+0x680/0x680 [ 2343.247328] ? _cond_resched+0x12/0x80 [ 2343.248160] ? ext4_ext_truncate+0x250/0x250 [ 2343.249075] ? ext4_ext_truncate+0x250/0x250 [ 2343.249996] vfs_fallocate+0x48f/0xd00 [ 2343.250795] __x64_sys_fallocate+0xcf/0x140 [ 2343.251672] do_syscall_64+0x33/0x40 [ 2343.252436] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2343.253488] RIP: 0033:0x7f5d3b9e6b19 [ 2343.254257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2343.258015] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2343.259556] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2343.261015] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2343.262472] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2343.263909] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2343.265366] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:28:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) 14:28:51 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x0, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:28:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 17) 14:28:51 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x0, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:28:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x2) 14:28:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 21) [ 2355.510820] FAULT_INJECTION: forcing a failure. [ 2355.510820] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.512276] CPU: 1 PID: 10945 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2355.512977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.514072] Call Trace: [ 2355.514428] dump_stack+0x107/0x167 [ 2355.514915] should_fail.cold+0x5/0xa [ 2355.515420] ? create_object.isra.0+0x3a/0xa20 [ 2355.516021] ? create_object.isra.0+0x3a/0xa20 [ 2355.516627] should_failslab+0x5/0x20 [ 2355.517128] kmem_cache_alloc+0x5b/0x310 [ 2355.517673] create_object.isra.0+0x3a/0xa20 [ 2355.518247] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2355.518915] __kmalloc+0x16e/0x390 [ 2355.519288] selinux_kernfs_init_security+0x137/0x4c0 [ 2355.519961] ? selinux_file_mprotect+0x610/0x610 [ 2355.520452] ? selinux_file_mprotect+0x610/0x610 [ 2355.521116] ? selinux_kernfs_init_security+0x23/0x4c0 [ 2355.521675] security_kernfs_init_security+0x4e/0xb0 [ 2355.522348] __kernfs_new_node+0x531/0x860 [ 2355.522793] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2355.523415] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2355.524033] ? pcpu_alloc+0x12a/0x1240 [ 2355.524549] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2355.525229] kernfs_create_dir_ns+0x9c/0x230 [ 2355.525691] cgroup_mkdir+0x318/0xf50 [ 2355.526193] ? cgroup_destroy_locked+0x710/0x710 [ 2355.526677] kernfs_iop_mkdir+0x14d/0x1e0 [ 2355.527225] vfs_mkdir+0x493/0x700 [ 2355.527592] do_mkdirat+0x150/0x2b0 [ 2355.528069] ? user_path_create+0xf0/0xf0 [ 2355.528502] do_syscall_64+0x33/0x40 [ 2355.528991] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.529674] RIP: 0033:0x7f66172e4b19 [ 2355.530103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.531990] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2355.532766] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2355.533492] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2355.534240] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.534974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.535707] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2355.545999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10954 comm=syz-executor.5 [ 2355.549254] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:28:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(0x0, 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:28:51 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbe", 0x1a}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2355.573265] FAULT_INJECTION: forcing a failure. [ 2355.573265] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.574970] CPU: 1 PID: 10954 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2355.575856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.576671] Call Trace: [ 2355.577016] dump_stack+0x107/0x167 [ 2355.577486] should_fail.cold+0x5/0xa [ 2355.578002] ? mempool_alloc+0x148/0x360 [ 2355.578522] ? mempool_free_pages+0x20/0x20 [ 2355.579072] should_failslab+0x5/0x20 [ 2355.579452] kmem_cache_alloc+0x5b/0x310 [ 2355.579974] ? mempool_free_pages+0x20/0x20 [ 2355.580400] mempool_alloc+0x148/0x360 [ 2355.580901] ? mempool_resize+0x7d0/0x7d0 [ 2355.581315] ? mempool_resize+0x7d0/0x7d0 [ 2355.581869] bvec_alloc+0xd8/0x2f0 [ 2355.582226] bio_alloc_bioset+0x40a/0x600 [ 2355.582649] ? bvec_alloc+0x2f0/0x2f0 [ 2355.583035] ext4_bio_write_page+0x9ba/0x1390 [ 2355.583506] mpage_submit_page+0x14b/0x260 [ 2355.583937] ext4_writepages+0x1f2e/0x3350 [ 2355.584391] ? lock_chain_count+0x20/0x20 [ 2355.584813] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2355.585320] ? lock_chain_count+0x20/0x20 [ 2355.585768] ? __lock_acquire+0x1657/0x5b00 [ 2355.586218] ? __lock_acquire+0x1657/0x5b00 [ 2355.586666] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2355.587169] do_writepages+0xee/0x2a0 [ 2355.587566] ? page_writeback_cpu_online+0x20/0x20 [ 2355.588069] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2355.588625] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2355.589135] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2355.589703] ? ext4_fallocate+0x18d/0x3860 [ 2355.590148] filemap_write_and_wait_range+0x65/0x100 [ 2355.590673] ext4_punch_hole+0x178/0x1070 [ 2355.591093] ? downgrade_write+0x3a0/0x3a0 [ 2355.591531] ? down_write_killable+0x180/0x180 [ 2355.592010] ext4_fallocate+0xd8e/0x3860 [ 2355.592438] ? __x64_sys_fallocate+0xcf/0x140 [ 2355.592895] ? lock_release+0x680/0x680 [ 2355.593303] ? _cond_resched+0x12/0x80 [ 2355.593711] ? ext4_ext_truncate+0x250/0x250 [ 2355.594172] ? ext4_ext_truncate+0x250/0x250 [ 2355.594622] vfs_fallocate+0x48f/0xd00 [ 2355.595032] __x64_sys_fallocate+0xcf/0x140 [ 2355.595476] do_syscall_64+0x33/0x40 [ 2355.595862] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.596384] RIP: 0033:0x7f5d3b9e6b19 [ 2355.596769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.598631] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2355.599415] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2355.600147] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2355.600862] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.601605] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.602342] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2355.616955] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:28:51 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbe", 0x1a}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:28:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 14:28:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 22) 14:28:51 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x0, 0xfe2d, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:28:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(0x0, 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:28:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 18) [ 2355.772138] FAULT_INJECTION: forcing a failure. [ 2355.772138] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.773325] CPU: 1 PID: 10973 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2355.774014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.774824] Call Trace: [ 2355.775095] dump_stack+0x107/0x167 [ 2355.775458] should_fail.cold+0x5/0xa [ 2355.775841] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2355.776411] should_failslab+0x5/0x20 [ 2355.776792] kmem_cache_alloc+0x5b/0x310 [ 2355.777199] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2355.777758] idr_get_free+0x4b5/0x8f0 [ 2355.778144] idr_alloc_u32+0x170/0x2d0 [ 2355.778532] ? __fprop_inc_percpu_max+0x130/0x130 [ 2355.779012] ? lock_acquire+0x197/0x470 [ 2355.779410] ? __kernfs_new_node+0xff/0x860 [ 2355.779852] idr_alloc_cyclic+0x102/0x230 [ 2355.780276] ? idr_alloc+0x130/0x130 [ 2355.780654] ? rwlock_bug.part.0+0x90/0x90 [ 2355.781111] __kernfs_new_node+0x117/0x860 [ 2355.781586] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2355.782110] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2355.782585] ? pcpu_alloc+0x12a/0x1240 [ 2355.783003] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2355.783529] kernfs_create_dir_ns+0x9c/0x230 [ 2355.783999] cgroup_mkdir+0x318/0xf50 [ 2355.784394] ? cgroup_destroy_locked+0x710/0x710 [ 2355.784898] kernfs_iop_mkdir+0x14d/0x1e0 [ 2355.785323] vfs_mkdir+0x493/0x700 [ 2355.785717] do_mkdirat+0x150/0x2b0 [ 2355.786088] ? user_path_create+0xf0/0xf0 [ 2355.786538] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.787066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.787621] do_syscall_64+0x33/0x40 [ 2355.788000] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.788544] RIP: 0033:0x7f66172e4b19 [ 2355.788925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.790871] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2355.791636] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2355.792395] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2355.793143] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.793922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.794694] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2355.823276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10975 comm=syz-executor.5 [ 2355.854341] FAULT_INJECTION: forcing a failure. [ 2355.854341] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.855650] CPU: 1 PID: 10975 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2355.856377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.857269] Call Trace: 14:28:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8) 14:28:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) [ 2355.857561] dump_stack+0x107/0x167 [ 2355.858127] should_fail.cold+0x5/0xa [ 2355.858518] ? create_object.isra.0+0x3a/0xa20 [ 2355.858973] should_failslab+0x5/0x20 [ 2355.859348] kmem_cache_alloc+0x5b/0x310 [ 2355.859750] create_object.isra.0+0x3a/0xa20 [ 2355.860180] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2355.860681] kmem_cache_alloc+0x159/0x310 [ 2355.861094] ? mempool_free_pages+0x20/0x20 [ 2355.861518] mempool_alloc+0x148/0x360 [ 2355.861918] ? mempool_resize+0x7d0/0x7d0 [ 2355.862330] ? mempool_resize+0x7d0/0x7d0 [ 2355.862747] bvec_alloc+0xd8/0x2f0 [ 2355.863100] bio_alloc_bioset+0x40a/0x600 [ 2355.863512] ? bvec_alloc+0x2f0/0x2f0 [ 2355.863894] ext4_bio_write_page+0x9ba/0x1390 [ 2355.864344] mpage_submit_page+0x14b/0x260 [ 2355.864895] ext4_writepages+0x1f2e/0x3350 [ 2355.865462] ? lock_chain_count+0x20/0x20 [ 2355.866005] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2355.866597] ? lock_chain_count+0x20/0x20 [ 2355.867036] ? __lock_acquire+0x1657/0x5b00 [ 2355.867471] ? __lock_acquire+0x1657/0x5b00 [ 2355.867915] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2355.868405] do_writepages+0xee/0x2a0 [ 2355.868787] ? page_writeback_cpu_online+0x20/0x20 [ 2355.869272] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2355.869814] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2355.870306] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2355.870831] ? ext4_fallocate+0x18d/0x3860 [ 2355.871255] filemap_write_and_wait_range+0x65/0x100 [ 2355.871759] ext4_punch_hole+0x178/0x1070 [ 2355.872166] ? downgrade_write+0x3a0/0x3a0 [ 2355.872593] ? down_write_killable+0x180/0x180 [ 2355.873059] ext4_fallocate+0xd8e/0x3860 [ 2355.873461] ? __x64_sys_fallocate+0xcf/0x140 [ 2355.873920] ? lock_release+0x680/0x680 [ 2355.874315] ? _cond_resched+0x12/0x80 [ 2355.874710] ? ext4_ext_truncate+0x250/0x250 [ 2355.875148] ? ext4_ext_truncate+0x250/0x250 [ 2355.875244] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2355.875580] vfs_fallocate+0x48f/0xd00 [ 2355.875594] __x64_sys_fallocate+0xcf/0x140 [ 2355.875607] do_syscall_64+0x33/0x40 [ 2355.875626] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.878825] RIP: 0033:0x7f5d3b9e6b19 [ 2355.879192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.880993] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2355.881758] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2355.882462] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2355.883161] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.883863] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.884561] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:28:52 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)="b3993d02091b93f8caf64290f2b2f06d8f48fab33b982da937b0345bf77ce3ae7e73432cd62d7e6932b186", 0x2b}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbe", 0x1a}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:28:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) [ 2355.990340] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2368.168371] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:29:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 23) 14:29:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) 14:29:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x10) 14:29:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) 14:29:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(0x0, 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:29:04 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0x0, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:29:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 19) 14:29:04 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x7, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2368.189618] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2368.197245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11007 comm=syz-executor.5 14:29:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x118) [ 2368.227353] FAULT_INJECTION: forcing a failure. [ 2368.227353] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.228751] CPU: 1 PID: 11000 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2368.229450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.230291] Call Trace: [ 2368.230585] dump_stack+0x107/0x167 [ 2368.230956] should_fail.cold+0x5/0xa [ 2368.231337] ? create_object.isra.0+0x3a/0xa20 [ 2368.231802] should_failslab+0x5/0x20 [ 2368.232180] kmem_cache_alloc+0x5b/0x310 [ 2368.232587] ? mark_held_locks+0x9e/0xe0 [ 2368.232992] create_object.isra.0+0x3a/0xa20 [ 2368.233428] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2368.233946] kmem_cache_alloc+0x159/0x310 [ 2368.234364] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2368.234921] idr_get_free+0x4b5/0x8f0 [ 2368.235307] idr_alloc_u32+0x170/0x2d0 [ 2368.235694] ? __fprop_inc_percpu_max+0x130/0x130 [ 2368.236172] ? lock_acquire+0x197/0x470 [ 2368.236568] ? __kernfs_new_node+0xff/0x860 [ 2368.236998] idr_alloc_cyclic+0x102/0x230 [ 2368.237409] ? idr_alloc+0x130/0x130 [ 2368.237784] ? rwlock_bug.part.0+0x90/0x90 [ 2368.238249] __kernfs_new_node+0x117/0x860 [ 2368.238704] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2368.239213] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2368.239718] ? pcpu_alloc+0x12a/0x1240 [ 2368.240112] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2368.240676] kernfs_create_dir_ns+0x9c/0x230 [ 2368.241149] cgroup_mkdir+0x318/0xf50 [ 2368.241561] ? cgroup_destroy_locked+0x710/0x710 [ 2368.242081] kernfs_iop_mkdir+0x14d/0x1e0 [ 2368.242532] vfs_mkdir+0x493/0x700 [ 2368.242914] do_mkdirat+0x150/0x2b0 [ 2368.243306] ? user_path_create+0xf0/0xf0 [ 2368.243755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.244271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.244829] do_syscall_64+0x33/0x40 [ 2368.245225] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2368.245782] RIP: 0033:0x7f66172e4b19 [ 2368.246181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.248146] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2368.248960] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2368.249730] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2368.250486] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.251246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2368.252009] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2368.280026] FAULT_INJECTION: forcing a failure. [ 2368.280026] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.282715] CPU: 0 PID: 11007 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2368.284129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.285805] Call Trace: [ 2368.286353] dump_stack+0x107/0x167 [ 2368.287109] should_fail.cold+0x5/0xa [ 2368.287872] ? create_task_io_context+0x2c/0x430 [ 2368.288827] should_failslab+0x5/0x20 [ 2368.289600] kmem_cache_alloc_node+0x55/0x330 [ 2368.290524] create_task_io_context+0x2c/0x430 [ 2368.291454] submit_bio_checks+0x1382/0x1730 [ 2368.292373] ? trace_event_raw_event_block_rq_requeue+0x560/0x560 [ 2368.293616] ? __pagevec_release+0x1f3/0x480 [ 2368.294530] ? __put_compound_page+0xd0/0xd0 [ 2368.295427] submit_bio_noacct+0x82/0x1010 [ 2368.296281] ? blk_queue_enter+0xc30/0xc30 [ 2368.297150] ? mpage_release_unused_pages+0x4a7/0x600 [ 2368.298207] submit_bio+0xf3/0x4e0 [ 2368.298923] ? submit_bio_noacct+0x1010/0x1010 [ 2368.299841] ? up_write+0x191/0x550 [ 2368.300584] ? downgrade_write+0x3a0/0x3a0 [ 2368.301453] ? down_write_killable+0x180/0x180 [ 2368.302401] ext4_io_submit+0x181/0x210 [ 2368.303207] ext4_writepages+0x1265/0x3350 [ 2368.304097] ? lock_chain_count+0x20/0x20 [ 2368.304924] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2368.305942] ? lock_chain_count+0x20/0x20 [ 2368.306801] ? __lock_acquire+0x1657/0x5b00 [ 2368.307698] ? __lock_acquire+0x1657/0x5b00 [ 2368.308598] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2368.309714] do_writepages+0xee/0x2a0 [ 2368.310555] ? page_writeback_cpu_online+0x20/0x20 [ 2368.311563] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2368.312649] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2368.313653] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2368.314746] ? ext4_fallocate+0x18d/0x3860 [ 2368.315624] filemap_write_and_wait_range+0x65/0x100 [ 2368.316664] ext4_punch_hole+0x178/0x1070 [ 2368.317500] ? downgrade_write+0x3a0/0x3a0 [ 2368.318367] ? down_write_killable+0x180/0x180 [ 2368.319302] ext4_fallocate+0xd8e/0x3860 [ 2368.320119] ? __x64_sys_fallocate+0xcf/0x140 [ 2368.321017] ? lock_release+0x680/0x680 [ 2368.321832] ? _cond_resched+0x12/0x80 [ 2368.322628] ? ext4_ext_truncate+0x250/0x250 [ 2368.323531] ? ext4_ext_truncate+0x250/0x250 [ 2368.324422] vfs_fallocate+0x48f/0xd00 [ 2368.325230] __x64_sys_fallocate+0xcf/0x140 [ 2368.326129] do_syscall_64+0x33/0x40 [ 2368.326869] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2368.327898] RIP: 0033:0x7f5d3b9e6b19 [ 2368.328651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.332356] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2368.333897] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2368.335364] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2368.336789] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.338248] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2368.339694] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:29:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2368.370672] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:29:04 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0x0, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:29:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:29:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) 14:29:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 24) 14:29:04 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x7, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:29:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 2368.498927] FAULT_INJECTION: forcing a failure. [ 2368.498927] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.500203] CPU: 1 PID: 11028 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2368.500910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.501773] Call Trace: [ 2368.502053] dump_stack+0x107/0x167 [ 2368.502431] should_fail.cold+0x5/0xa [ 2368.502821] ? selinux_kernfs_init_security+0x137/0x4c0 [ 2368.503371] should_failslab+0x5/0x20 [ 2368.503760] __kmalloc+0x72/0x390 [ 2368.504132] selinux_kernfs_init_security+0x137/0x4c0 [ 2368.504703] ? selinux_file_mprotect+0x610/0x610 [ 2368.505225] ? find_held_lock+0x2c/0x110 [ 2368.505700] ? __kernfs_new_node+0x2ad/0x860 [ 2368.506205] ? lock_downgrade+0x6d0/0x6d0 [ 2368.506667] ? rwlock_bug.part.0+0x90/0x90 [ 2368.507149] security_kernfs_init_security+0x4e/0xb0 [ 2368.507716] __kernfs_new_node+0x531/0x860 [ 2368.508185] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2368.508711] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2368.509247] ? pcpu_alloc+0x12a/0x1240 [ 2368.509683] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2368.510280] kernfs_create_dir_ns+0x9c/0x230 [ 2368.510781] cgroup_mkdir+0x318/0xf50 [ 2368.511213] ? cgroup_destroy_locked+0x710/0x710 [ 2368.511742] kernfs_iop_mkdir+0x14d/0x1e0 [ 2368.512204] vfs_mkdir+0x493/0x700 [ 2368.512604] do_mkdirat+0x150/0x2b0 [ 2368.513007] ? user_path_create+0xf0/0xf0 [ 2368.513468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.514079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.514665] do_syscall_64+0x33/0x40 [ 2368.515089] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2368.515654] RIP: 0033:0x7f66172e4b19 [ 2368.516084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.518129] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2368.518970] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2368.519751] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2368.520527] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.521309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2368.522122] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:29:04 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) 14:29:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 1) 14:29:04 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x7, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2368.577161] FAULT_INJECTION: forcing a failure. [ 2368.577161] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.578678] CPU: 1 PID: 11036 Comm: syz-executor.1 Not tainted 5.10.192 #1 [ 2368.579365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.580189] Call Trace: [ 2368.580459] dump_stack+0x107/0x167 [ 2368.580820] should_fail.cold+0x5/0xa [ 2368.581196] ? getname_flags.part.0+0x50/0x4f0 [ 2368.581654] should_failslab+0x5/0x20 [ 2368.582037] kmem_cache_alloc+0x5b/0x310 [ 2368.582440] ? __mutex_unlock_slowpath+0x2eb/0x600 [ 2368.582935] getname_flags.part.0+0x50/0x4f0 [ 2368.583374] getname_flags+0x9a/0xe0 [ 2368.583755] do_mkdirat+0x8f/0x2b0 [ 2368.584107] ? user_path_create+0xf0/0xf0 [ 2368.584522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.585037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.585548] do_syscall_64+0x33/0x40 [ 2368.585933] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2368.586467] RIP: 0033:0x7f9019290b19 [ 2368.586867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.588846] RSP: 002b:00007f9016806188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2368.589659] RAX: ffffffffffffffda RBX: 00007f90193a3f60 RCX: 00007f9019290b19 [ 2368.590442] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2368.591209] RBP: 00007f90168061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.591977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2368.592735] R13: 00007ffe488f908f R14: 00007f9016806300 R15: 0000000000022000 14:29:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 25) 14:29:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) 14:29:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 2) [ 2368.636211] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2368.640338] FAULT_INJECTION: forcing a failure. [ 2368.640338] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.641766] CPU: 1 PID: 11041 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2368.642465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.643294] Call Trace: [ 2368.643573] dump_stack+0x107/0x167 [ 2368.644444] should_fail.cold+0x5/0xa [ 2368.645366] ? create_object.isra.0+0x3a/0xa20 [ 2368.646496] should_failslab+0x5/0x20 [ 2368.647417] kmem_cache_alloc+0x5b/0x310 [ 2368.648392] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2368.649550] create_object.isra.0+0x3a/0xa20 [ 2368.650608] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2368.651822] __kmalloc+0x16e/0x390 [ 2368.652695] selinux_kernfs_init_security+0x137/0x4c0 [ 2368.653944] ? selinux_file_mprotect+0x610/0x610 [ 2368.655092] ? find_held_lock+0x2c/0x110 [ 2368.656228] ? __kernfs_new_node+0x2ad/0x860 [ 2368.657289] ? lock_downgrade+0x6d0/0x6d0 [ 2368.658316] ? rwlock_bug.part.0+0x90/0x90 [ 2368.659012] security_kernfs_init_security+0x4e/0xb0 [ 2368.659900] __kernfs_new_node+0x531/0x860 [ 2368.660601] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2368.661314] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2368.662045] ? pcpu_alloc+0x12a/0x1240 [ 2368.662626] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2368.663406] kernfs_create_dir_ns+0x9c/0x230 [ 2368.664068] cgroup_mkdir+0x318/0xf50 [ 2368.664644] ? cgroup_destroy_locked+0x710/0x710 [ 2368.665351] kernfs_iop_mkdir+0x14d/0x1e0 [ 2368.665989] vfs_mkdir+0x493/0x700 [ 2368.666525] do_mkdirat+0x150/0x2b0 [ 2368.667077] ? user_path_create+0xf0/0xf0 [ 2368.667711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.668496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.669271] do_syscall_64+0x33/0x40 [ 2368.669853] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2368.670621] RIP: 0033:0x7f66172e4b19 [ 2368.671193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.673950] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2368.675098] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2368.676175] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2368.677243] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.678312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2368.679368] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:29:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 20) [ 2368.778348] FAULT_INJECTION: forcing a failure. [ 2368.778348] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.780333] CPU: 1 PID: 11045 Comm: syz-executor.1 Not tainted 5.10.192 #1 [ 2368.781370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.782588] Call Trace: [ 2368.783000] dump_stack+0x107/0x167 [ 2368.783546] should_fail.cold+0x5/0xa [ 2368.784125] ? create_object.isra.0+0x3a/0xa20 [ 2368.784801] should_failslab+0x5/0x20 [ 2368.785373] kmem_cache_alloc+0x5b/0x310 [ 2368.785978] ? ksys_write+0x21a/0x260 [ 2368.786559] create_object.isra.0+0x3a/0xa20 [ 2368.787205] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2368.787973] kmem_cache_alloc+0x159/0x310 [ 2368.788602] getname_flags.part.0+0x50/0x4f0 [ 2368.789281] getname_flags+0x9a/0xe0 [ 2368.789857] do_mkdirat+0x8f/0x2b0 [ 2368.790396] ? user_path_create+0xf0/0xf0 [ 2368.791022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2368.791806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2368.792579] do_syscall_64+0x33/0x40 [ 2368.793143] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2368.793924] RIP: 0033:0x7f9019290b19 [ 2368.794490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.797255] RSP: 002b:00007f9016806188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2368.798402] RAX: ffffffffffffffda RBX: 00007f90193a3f60 RCX: 00007f9019290b19 [ 2368.799469] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2368.800538] RBP: 00007f90168061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.801609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2368.802680] R13: 00007ffe488f908f R14: 00007f9016806300 R15: 0000000000022000 [ 2368.860702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11048 comm=syz-executor.5 [ 2368.883839] FAULT_INJECTION: forcing a failure. [ 2368.883839] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.886688] CPU: 0 PID: 11048 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2368.888167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.889946] Call Trace: [ 2368.890518] dump_stack+0x107/0x167 [ 2368.891304] should_fail.cold+0x5/0xa [ 2368.892118] ? create_object.isra.0+0x3a/0xa20 [ 2368.893096] should_failslab+0x5/0x20 [ 2368.893905] kmem_cache_alloc+0x5b/0x310 [ 2368.894773] create_object.isra.0+0x3a/0xa20 [ 2368.895702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2368.896782] kmem_cache_alloc_node+0x169/0x330 [ 2368.897773] create_task_io_context+0x2c/0x430 [ 2368.898751] submit_bio_checks+0x1382/0x1730 [ 2368.899688] ? trace_event_raw_event_block_rq_requeue+0x560/0x560 [ 2368.900988] ? __pagevec_release+0x1f3/0x480 [ 2368.901927] ? __put_compound_page+0xd0/0xd0 [ 2368.902865] submit_bio_noacct+0x82/0x1010 [ 2368.903762] ? blk_queue_enter+0xc30/0xc30 [ 2368.904658] ? mpage_release_unused_pages+0x4a7/0x600 [ 2368.905761] submit_bio+0xf3/0x4e0 [ 2368.906535] ? submit_bio_noacct+0x1010/0x1010 [ 2368.907498] ? up_write+0x191/0x550 [ 2368.908277] ? downgrade_write+0x3a0/0x3a0 [ 2368.909167] ? down_write_killable+0x180/0x180 [ 2368.910160] ext4_io_submit+0x181/0x210 [ 2368.911003] ext4_writepages+0x1265/0x3350 [ 2368.911948] ? lock_chain_count+0x20/0x20 [ 2368.912849] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2368.913932] ? lock_chain_count+0x20/0x20 [ 2368.914853] ? __lock_acquire+0x1657/0x5b00 [ 2368.915814] ? __lock_acquire+0x1657/0x5b00 [ 2368.916764] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2368.917839] do_writepages+0xee/0x2a0 [ 2368.918678] ? page_writeback_cpu_online+0x20/0x20 [ 2368.919762] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2368.920919] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2368.922031] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2368.923186] ? ext4_fallocate+0x18d/0x3860 [ 2368.924129] filemap_write_and_wait_range+0x65/0x100 [ 2368.925233] ext4_punch_hole+0x178/0x1070 [ 2368.926143] ? downgrade_write+0x3a0/0x3a0 [ 2368.927059] ? down_write_killable+0x180/0x180 [ 2368.928070] ext4_fallocate+0xd8e/0x3860 [ 2368.928951] ? __x64_sys_fallocate+0xcf/0x140 [ 2368.929950] ? lock_release+0x680/0x680 [ 2368.930812] ? _cond_resched+0x12/0x80 [ 2368.931669] ? ext4_ext_truncate+0x250/0x250 [ 2368.932634] ? ext4_ext_truncate+0x250/0x250 [ 2368.933595] vfs_fallocate+0x48f/0xd00 [ 2368.934452] __x64_sys_fallocate+0xcf/0x140 [ 2368.935399] do_syscall_64+0x33/0x40 [ 2368.936202] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2368.937305] RIP: 0033:0x7f5d3b9e6b19 [ 2368.938252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2368.942343] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2368.944019] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2368.945579] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2368.947147] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2368.948706] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2368.950280] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2383.138481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11062 comm=syz-executor.5 14:29:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 21) 14:29:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x120) 14:29:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 3) 14:29:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 26) 14:29:19 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0x0, 0x0, 0x1d, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:29:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 14:29:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {0x0}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:29:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) [ 2383.171374] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2383.188159] FAULT_INJECTION: forcing a failure. [ 2383.188159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2383.190738] CPU: 1 PID: 11063 Comm: syz-executor.1 Not tainted 5.10.192 #1 [ 2383.192119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.193770] Call Trace: [ 2383.194321] dump_stack+0x107/0x167 [ 2383.195048] should_fail.cold+0x5/0xa [ 2383.195323] FAULT_INJECTION: forcing a failure. [ 2383.195323] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.195807] strncpy_from_user+0x34/0x470 [ 2383.195832] getname_flags.part.0+0x95/0x4f0 [ 2383.195851] getname_flags+0x9a/0xe0 [ 2383.195869] do_mkdirat+0x8f/0x2b0 [ 2383.195892] ? user_path_create+0xf0/0xf0 [ 2383.202499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2383.203534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.204572] do_syscall_64+0x33/0x40 [ 2383.205311] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2383.206351] RIP: 0033:0x7f9019290b19 [ 2383.207088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2383.210723] RSP: 002b:00007f9016806188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2383.212223] RAX: ffffffffffffffda RBX: 00007f90193a3f60 RCX: 00007f9019290b19 [ 2383.213629] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2383.215048] RBP: 00007f90168061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.216448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2383.217861] R13: 00007ffe488f908f R14: 00007f9016806300 R15: 0000000000022000 [ 2383.219307] CPU: 0 PID: 11066 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2383.221018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.223065] Call Trace: [ 2383.223724] dump_stack+0x107/0x167 [ 2383.224632] should_fail.cold+0x5/0xa [ 2383.225583] should_failslab+0x5/0x20 [ 2383.226537] __kmalloc_track_caller+0x79/0x370 [ 2383.227666] ? security_context_to_sid_core+0xb4/0x890 [ 2383.228963] kmemdup_nul+0x2d/0xa0 [ 2383.229841] security_context_to_sid_core+0xb4/0x890 [ 2383.231115] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2383.232441] ? do_raw_spin_lock+0x121/0x260 [ 2383.233494] ? rwlock_bug.part.0+0x90/0x90 [ 2383.234530] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2383.235711] ? do_raw_spin_unlock+0x4f/0x220 [ 2383.236789] ? _raw_spin_unlock+0x1a/0x30 [ 2383.237801] security_context_to_sid+0x35/0x50 [ 2383.238944] selinux_kernfs_init_security+0x19d/0x4c0 [ 2383.240203] ? selinux_file_mprotect+0x610/0x610 [ 2383.241355] ? find_held_lock+0x2c/0x110 [ 2383.242379] ? __kernfs_new_node+0x2ad/0x860 [ 2383.243455] ? lock_downgrade+0x6d0/0x6d0 [ 2383.244461] ? rwlock_bug.part.0+0x90/0x90 [ 2383.245504] security_kernfs_init_security+0x4e/0xb0 [ 2383.246752] __kernfs_new_node+0x531/0x860 [ 2383.247794] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2383.248945] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2383.250095] ? pcpu_alloc+0x12a/0x1240 [ 2383.251070] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2383.252357] kernfs_create_dir_ns+0x9c/0x230 [ 2383.253447] cgroup_mkdir+0x318/0xf50 [ 2383.254401] ? cgroup_destroy_locked+0x710/0x710 [ 2383.255565] kernfs_iop_mkdir+0x14d/0x1e0 [ 2383.256599] vfs_mkdir+0x493/0x700 [ 2383.257471] do_mkdirat+0x150/0x2b0 [ 2383.258396] ? user_path_create+0xf0/0xf0 [ 2383.259419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2383.260705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.261970] do_syscall_64+0x33/0x40 [ 2383.262885] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2383.264134] RIP: 0033:0x7f66172e4b19 [ 2383.265040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2383.269513] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2383.271360] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2383.273088] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2383.274818] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.276530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2383.278263] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2383.288341] FAULT_INJECTION: forcing a failure. [ 2383.288341] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.291329] CPU: 0 PID: 11062 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2383.292989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.294988] Call Trace: [ 2383.295630] dump_stack+0x107/0x167 [ 2383.296522] should_fail.cold+0x5/0xa [ 2383.297442] ? ext4_init_io_end+0x23/0x180 [ 2383.298488] ? ext4_init_io_end+0x23/0x180 [ 2383.299507] should_failslab+0x5/0x20 [ 2383.300434] kmem_cache_alloc+0x5b/0x310 [ 2383.301429] ext4_init_io_end+0x23/0x180 [ 2383.302434] ext4_writepages+0xee9/0x3350 [ 2383.303491] ? lock_chain_count+0x20/0x20 [ 2383.304500] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2383.305707] ? lock_chain_count+0x20/0x20 [ 2383.306783] ? __lock_acquire+0x1657/0x5b00 [ 2383.307875] ? __lock_acquire+0x1657/0x5b00 [ 2383.308964] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2383.310193] do_writepages+0xee/0x2a0 [ 2383.311149] ? page_writeback_cpu_online+0x20/0x20 [ 2383.312365] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2383.313689] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2383.314961] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2383.316306] ? ext4_fallocate+0x18d/0x3860 [ 2383.317388] filemap_write_and_wait_range+0x65/0x100 [ 2383.318682] ext4_punch_hole+0x178/0x1070 [ 2383.319712] ? downgrade_write+0x3a0/0x3a0 [ 2383.320662] ? down_write_killable+0x180/0x180 [ 2383.321655] ext4_fallocate+0xd8e/0x3860 [ 2383.322538] ? __x64_sys_fallocate+0xcf/0x140 [ 2383.323502] ? lock_release+0x680/0x680 [ 2383.324347] ? _cond_resched+0x12/0x80 [ 2383.325187] ? ext4_ext_truncate+0x250/0x250 [ 2383.326160] ? ext4_ext_truncate+0x250/0x250 [ 2383.327105] vfs_fallocate+0x48f/0xd00 [ 2383.327947] __x64_sys_fallocate+0xcf/0x140 [ 2383.328872] do_syscall_64+0x33/0x40 [ 2383.329675] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2383.330776] RIP: 0033:0x7f5d3b9e6b19 [ 2383.331576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2383.335518] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2383.337146] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2383.338675] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2383.340201] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.341737] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2383.343280] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:29:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0) 14:29:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {0x0}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:29:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) [ 2383.389966] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:29:19 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0xfe2d, 0x0, 0x0, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:29:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x140) 14:29:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 4) 14:29:35 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0xfe2d, 0x0, 0x0, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:29:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 14:29:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) [ 2398.785130] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2398.788594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11105 comm=syz-executor.5 14:29:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 27) 14:29:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 22) 14:29:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {0x0}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2398.805941] FAULT_INJECTION: forcing a failure. [ 2398.805941] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.808619] CPU: 1 PID: 11098 Comm: syz-executor.1 Not tainted 5.10.192 #1 [ 2398.809955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2398.811560] Call Trace: [ 2398.812079] dump_stack+0x107/0x167 [ 2398.812788] should_fail.cold+0x5/0xa [ 2398.813529] ? __d_alloc+0x2a/0x990 [ 2398.814244] should_failslab+0x5/0x20 [ 2398.814978] kmem_cache_alloc+0x5b/0x310 [ 2398.815759] ? __d_lookup+0x3bf/0x760 [ 2398.816499] __d_alloc+0x2a/0x990 [ 2398.817173] d_alloc+0x46/0x1c0 [ 2398.817828] __lookup_hash+0xcc/0x190 [ 2398.818622] filename_create+0x186/0x4a0 [ 2398.819477] ? filename_parentat+0x570/0x570 [ 2398.820323] ? getname_flags.part.0+0x1dd/0x4f0 [ 2398.821227] do_mkdirat+0xa2/0x2b0 [ 2398.821914] ? user_path_create+0xf0/0xf0 [ 2398.822730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2398.823760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.824782] do_syscall_64+0x33/0x40 [ 2398.825499] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2398.826508] RIP: 0033:0x7f9019290b19 [ 2398.827235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.830948] RSP: 002b:00007f9016806188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2398.832429] RAX: ffffffffffffffda RBX: 00007f90193a3f60 RCX: 00007f9019290b19 [ 2398.833307] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 2398.833816] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2398.833827] RBP: 00007f90168061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.833836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2398.833847] R13: 00007ffe488f908f R14: 00007f9016806300 R15: 0000000000022000 [ 2398.848995] FAULT_INJECTION: forcing a failure. [ 2398.848995] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.849276] FAULT_INJECTION: forcing a failure. [ 2398.849276] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.851665] CPU: 0 PID: 11107 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2398.851676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2398.851682] Call Trace: [ 2398.851707] dump_stack+0x107/0x167 [ 2398.851733] should_fail.cold+0x5/0xa [ 2398.851758] ? create_object.isra.0+0x3a/0xa20 [ 2398.860576] should_failslab+0x5/0x20 [ 2398.861445] kmem_cache_alloc+0x5b/0x310 [ 2398.862386] create_object.isra.0+0x3a/0xa20 [ 2398.863389] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2398.864554] __kmalloc_track_caller+0x177/0x370 [ 2398.865612] ? security_context_to_sid_core+0xb4/0x890 [ 2398.866828] kmemdup_nul+0x2d/0xa0 [ 2398.867643] security_context_to_sid_core+0xb4/0x890 [ 2398.868806] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2398.870041] ? do_raw_spin_lock+0x121/0x260 [ 2398.871048] ? rwlock_bug.part.0+0x90/0x90 [ 2398.872010] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2398.873116] ? do_raw_spin_unlock+0x4f/0x220 [ 2398.874124] ? _raw_spin_unlock+0x1a/0x30 [ 2398.875070] security_context_to_sid+0x35/0x50 [ 2398.876108] selinux_kernfs_init_security+0x19d/0x4c0 [ 2398.877273] ? selinux_file_mprotect+0x610/0x610 [ 2398.878371] ? find_held_lock+0x2c/0x110 [ 2398.879315] ? __kernfs_new_node+0x2ad/0x860 [ 2398.880308] ? lock_downgrade+0x6d0/0x6d0 [ 2398.881248] ? rwlock_bug.part.0+0x90/0x90 [ 2398.882221] security_kernfs_init_security+0x4e/0xb0 [ 2398.883372] __kernfs_new_node+0x531/0x860 [ 2398.884338] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2398.885408] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2398.886480] ? pcpu_alloc+0x12a/0x1240 [ 2398.887368] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2398.888544] kernfs_create_dir_ns+0x9c/0x230 [ 2398.889548] cgroup_mkdir+0x318/0xf50 [ 2398.890456] ? cgroup_destroy_locked+0x710/0x710 [ 2398.891536] kernfs_iop_mkdir+0x14d/0x1e0 [ 2398.892479] vfs_mkdir+0x493/0x700 [ 2398.893293] do_mkdirat+0x150/0x2b0 [ 2398.894138] ? user_path_create+0xf0/0xf0 [ 2398.895083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2398.896265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2398.897438] do_syscall_64+0x33/0x40 [ 2398.898287] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2398.899449] RIP: 0033:0x7f66172e4b19 [ 2398.900292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.904428] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2398.906151] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2398.907751] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2398.909355] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.910961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2398.912554] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 [ 2398.914185] CPU: 1 PID: 11105 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2398.915506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2398.917056] Call Trace: [ 2398.917559] dump_stack+0x107/0x167 [ 2398.918257] should_fail.cold+0x5/0xa [ 2398.918974] ? create_object.isra.0+0x3a/0xa20 [ 2398.919839] should_failslab+0x5/0x20 [ 2398.920562] kmem_cache_alloc+0x5b/0x310 [ 2398.921329] create_object.isra.0+0x3a/0xa20 [ 2398.922161] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2398.923118] kmem_cache_alloc+0x159/0x310 [ 2398.923905] ext4_init_io_end+0x23/0x180 [ 2398.924675] ext4_writepages+0xee9/0x3350 [ 2398.925491] ? lock_chain_count+0x20/0x20 [ 2398.926284] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2398.927205] ? lock_chain_count+0x20/0x20 [ 2398.928003] ? __lock_acquire+0x1657/0x5b00 [ 2398.928820] ? __lock_acquire+0x1657/0x5b00 [ 2398.929631] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2398.930555] do_writepages+0xee/0x2a0 [ 2398.931270] ? page_writeback_cpu_online+0x20/0x20 [ 2398.932194] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2398.933189] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2398.934125] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2398.935117] ? ext4_fallocate+0x18d/0x3860 [ 2398.935919] filemap_write_and_wait_range+0x65/0x100 [ 2398.936867] ext4_punch_hole+0x178/0x1070 [ 2398.937637] ? downgrade_write+0x3a0/0x3a0 [ 2398.938462] ? down_write_killable+0x180/0x180 [ 2398.939326] ext4_fallocate+0xd8e/0x3860 [ 2398.940096] ? __x64_sys_fallocate+0xcf/0x140 [ 2398.940931] ? lock_release+0x680/0x680 [ 2398.941677] ? _cond_resched+0x12/0x80 [ 2398.942443] ? ext4_ext_truncate+0x250/0x250 [ 2398.943297] ? ext4_ext_truncate+0x250/0x250 [ 2398.944118] vfs_fallocate+0x48f/0xd00 [ 2398.944863] __x64_sys_fallocate+0xcf/0x140 [ 2398.945671] do_syscall_64+0x33/0x40 [ 2398.946401] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2398.947356] RIP: 0033:0x7f5d3b9e6b19 [ 2398.948047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.951440] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2398.952840] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2398.954153] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2398.955455] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.956755] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2398.958060] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 14:29:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, 0x0, 0x86) 14:29:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x180) 14:29:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce355576c27dcb9a3be8b7baf836b3595b07e6a63e199efb48d58edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c48bfff4bd956999a19107b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8b72ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c05a5c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798552125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6e7d58462be2517", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 5) 14:29:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) 14:29:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, 0x0, 0x86) [ 2399.108285] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:29:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2399.190807] FAULT_INJECTION: forcing a failure. [ 2399.190807] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.192914] CPU: 1 PID: 11124 Comm: syz-executor.1 Not tainted 5.10.192 #1 [ 2399.194015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2399.195341] Call Trace: [ 2399.195773] dump_stack+0x107/0x167 [ 2399.196373] should_fail.cold+0x5/0xa [ 2399.196982] ? create_object.isra.0+0x3a/0xa20 [ 2399.197707] should_failslab+0x5/0x20 [ 2399.198322] kmem_cache_alloc+0x5b/0x310 [ 2399.198982] create_object.isra.0+0x3a/0xa20 [ 2399.199704] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2399.200535] kmem_cache_alloc+0x159/0x310 [ 2399.201215] __d_alloc+0x2a/0x990 [ 2399.201777] ? dput+0x1ae/0xc90 [ 2399.202336] d_alloc+0x46/0x1c0 [ 2399.202879] __lookup_hash+0xcc/0x190 [ 2399.203501] filename_create+0x186/0x4a0 [ 2399.204153] ? filename_parentat+0x570/0x570 [ 2399.204859] ? getname_flags.part.0+0x1dd/0x4f0 [ 2399.205611] do_mkdirat+0xa2/0x2b0 [ 2399.206206] ? user_path_create+0xf0/0xf0 [ 2399.206878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2399.207718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2399.208549] do_syscall_64+0x33/0x40 [ 2399.209151] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2399.209973] RIP: 0033:0x7f9019290b19 [ 2399.210586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2399.213542] RSP: 002b:00007f9016806188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2399.214767] RAX: ffffffffffffffda RBX: 00007f90193a3f60 RCX: 00007f9019290b19 [ 2399.215910] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2399.217063] RBP: 00007f90168061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2399.218214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2399.219358] R13: 00007ffe488f908f R14: 00007f9016806300 R15: 0000000000022000 [ 2399.280447] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:29:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 28) 14:29:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, 0x0, 0x86) [ 2411.255270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11142 comm=syz-executor.5 [ 2411.264972] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:29:47 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:29:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 6) 14:29:47 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2d3043, 0x1f1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1f, 0x48000000000, 0x0, 0x1, 0x8}}, 0x10840) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') pread64(r1, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0) ftruncate(r0, 0x1000003) fcntl$getflags(r0, 0x40a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) fallocate(r5, 0x59, 0x7fffffff, 0x4) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x0, 0x3, 0x2, 0xfe2d, 0x0, 0x0, 0x1}}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 14:29:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2e, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x1, 0x9, 0x7f, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(r2, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x22e) 14:29:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x1c, 0x0, 0xc21, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0x9, 0x0, 0x1ff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESHEX], 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x45, 0x53f, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x4077, 0x8000) (fail_nth: 23) 14:29:47 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) [ 2411.286208] FAULT_INJECTION: forcing a failure. [ 2411.286208] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.287858] CPU: 1 PID: 11142 Comm: syz-executor.5 Not tainted 5.10.192 #1 [ 2411.288680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.289624] Call Trace: [ 2411.289929] dump_stack+0x107/0x167 [ 2411.290348] should_fail.cold+0x5/0xa [ 2411.290788] ? jbd2__journal_start+0x190/0x7e0 [ 2411.291315] should_failslab+0x5/0x20 [ 2411.291748] kmem_cache_alloc+0x5b/0x310 [ 2411.292212] jbd2__journal_start+0x190/0x7e0 [ 2411.292254] FAULT_INJECTION: forcing a failure. [ 2411.292254] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.292715] __ext4_journal_start_sb+0x214/0x390 [ 2411.292732] ext4_writepages+0x102d/0x3350 [ 2411.292766] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2411.292784] ? mark_lock+0xf5/0x2df0 [ 2411.292808] ? mark_lock+0xf5/0x2df0 [ 2411.297914] ? find_held_lock+0x2c/0x110 [ 2411.298383] ? lock_downgrade+0x6d0/0x6d0 [ 2411.298877] ? __ext4_mark_inode_dirty+0x770/0x770 [ 2411.299434] do_writepages+0xee/0x2a0 [ 2411.299886] ? page_writeback_cpu_online+0x20/0x20 [ 2411.300445] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2411.301089] ? __filemap_fdatawrite_range+0x1e0/0x2f0 [ 2411.301687] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2411.302269] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2411.302896] ? ext4_fallocate+0x18d/0x3860 [ 2411.303388] filemap_write_and_wait_range+0x65/0x100 [ 2411.303985] ext4_punch_hole+0x178/0x1070 [ 2411.304473] ? downgrade_write+0x3a0/0x3a0 [ 2411.304975] ? down_write_killable+0x180/0x180 [ 2411.305518] ext4_fallocate+0xd8e/0x3860 [ 2411.305991] ? __x64_sys_fallocate+0xcf/0x140 [ 2411.306515] ? lock_release+0x680/0x680 [ 2411.306978] ? _cond_resched+0x12/0x80 [ 2411.307427] ? ext4_ext_truncate+0x250/0x250 [ 2411.307949] ? ext4_ext_truncate+0x250/0x250 [ 2411.308455] vfs_fallocate+0x48f/0xd00 [ 2411.308922] __x64_sys_fallocate+0xcf/0x140 [ 2411.309425] do_syscall_64+0x33/0x40 [ 2411.309866] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2411.310460] RIP: 0033:0x7f5d3b9e6b19 [ 2411.310899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2411.313050] RSP: 002b:00007f5d38f5c188 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2411.313942] RAX: ffffffffffffffda RBX: 00007f5d3baf9f60 RCX: 00007f5d3b9e6b19 [ 2411.314780] RDX: 0000000000004077 RSI: 0000000000000003 RDI: 0000000000000006 [ 2411.315624] RBP: 00007f5d38f5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.316436] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 2411.317268] R13: 00007fff293e76ff R14: 00007f5d38f5c300 R15: 0000000000022000 [ 2411.318146] CPU: 0 PID: 11141 Comm: syz-executor.1 Not tainted 5.10.192 #1 [ 2411.318192] EXT4-fs (sda): ext4_writepages: jbd2_start: 9223372036854775799 pages, ino 16000; err -12 [ 2411.319657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.319664] Call Trace: [ 2411.319696] dump_stack+0x107/0x167 [ 2411.319722] should_fail.cold+0x5/0xa [ 2411.324776] ? cgroup_mkdir+0x254/0xf50 [ 2411.325639] should_failslab+0x5/0x20 [ 2411.326467] __kmalloc+0x72/0x390 [ 2411.327229] cgroup_mkdir+0x254/0xf50 [ 2411.328059] ? cgroup_destroy_locked+0x710/0x710 [ 2411.329099] kernfs_iop_mkdir+0x14d/0x1e0 [ 2411.330003] vfs_mkdir+0x493/0x700 [ 2411.330793] do_mkdirat+0x150/0x2b0 [ 2411.331581] ? user_path_create+0xf0/0xf0 [ 2411.332613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2411.333797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2411.335031] do_syscall_64+0x33/0x40 [ 2411.335894] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2411.337054] RIP: 0033:0x7f9019290b19 [ 2411.337924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2411.342060] RSP: 002b:00007f9016806188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2411.343816] RAX: ffffffffffffffda RBX: 00007f90193a3f60 RCX: 00007f9019290b19 [ 2411.345397] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2411.347018] RBP: 00007f90168061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.348597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2411.350208] R13: 00007ffe488f908f R14: 00007f9016806300 R15: 0000000000022000 [ 2411.357104] FAULT_INJECTION: forcing a failure. [ 2411.357104] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.358947] CPU: 1 PID: 11148 Comm: syz-executor.3 Not tainted 5.10.192 #1 [ 2411.360000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.361253] Call Trace: [ 2411.361653] dump_stack+0x107/0x167 [ 2411.362203] should_fail.cold+0x5/0xa [ 2411.362794] should_failslab+0x5/0x20 [ 2411.363376] __kmalloc_track_caller+0x79/0x370 [ 2411.364066] ? simple_xattr_set+0x93/0x610 [ 2411.364713] kstrdup+0x36/0x70 [ 2411.365199] simple_xattr_set+0x93/0x610 [ 2411.365815] kernfs_xattr_set+0x50/0x80 [ 2411.366436] selinux_kernfs_init_security+0x26d/0x4c0 [ 2411.367147] ? selinux_file_mprotect+0x610/0x610 [ 2411.367700] ? find_held_lock+0x2c/0x110 [ 2411.368148] ? __kernfs_new_node+0x2ad/0x860 [ 2411.368663] ? rwlock_bug.part.0+0x90/0x90 [ 2411.369159] security_kernfs_init_security+0x4e/0xb0 [ 2411.369753] __kernfs_new_node+0x531/0x860 [ 2411.370253] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2411.370783] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2411.371326] ? pcpu_alloc+0x12a/0x1240 [ 2411.371788] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2411.372404] kernfs_create_dir_ns+0x9c/0x230 [ 2411.372922] cgroup_mkdir+0x318/0xf50 [ 2411.373371] ? cgroup_destroy_locked+0x710/0x710 [ 2411.373929] kernfs_iop_mkdir+0x14d/0x1e0 [ 2411.374422] vfs_mkdir+0x493/0x700 [ 2411.374834] do_mkdirat+0x150/0x2b0 [ 2411.375262] ? user_path_create+0xf0/0xf0 [ 2411.375742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2411.376340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2411.376940] do_syscall_64+0x33/0x40 [ 2411.377369] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2411.377962] RIP: 0033:0x7f66172e4b19 [ 2411.378415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2411.380540] RSP: 002b:00007f661485a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2411.381424] RAX: ffffffffffffffda RBX: 00007f66173f7f60 RCX: 00007f66172e4b19 [ 2411.382255] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2411.383083] RBP: 00007f661485a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.383909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2411.384729] R13: 00007ffd9d4c8daf R14: 00007f661485a300 R15: 0000000000022000 14:29:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3b175157a44ccfd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d756e69002c6163636573736ce7dcc036429bcf6476706f72742c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB=',func=FILE_CHECK,\x00']) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX=r2]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 7) [ 2411.437356] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 14:29:47 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="2f27be35e60461ba142fc9567e5b56f2f1a581b5e6dd7ce18a797655652ade23e3cc7754a456c6d507813c8126f80362ccea5f8c71f9be24f85cce6606d97ca633060b288d7df6418abdfe88263dc47d3b4c6e6a8e96a59a21cd846a615cf161662836e3edee3f3ebefcb34d2caa03a58fc0812699328b303cd62d4f3063e68f99477327f006bcae792cd1524bd02dc8d54e4ffeda4e3c2640350a694121fdd11a8ebb804e521d44cd47112081c645202cce52d7d7", 0xb5}, {&(0x7f0000000280)}, {&(0x7f0000000340)="d5bb8ca7c21734e6fe553156fe5fa733cbc65d7bbd7ff59e5cbed1", 0x1b}, {&(0x7f0000000380)="19248760b908459f54ef29937d", 0xd}, {&(0x7f0000000440)="23e3899b8d560035259979adc70a33edf72e9859dc4c617010ea86c9c8e757cdbf122eda5fbb1053513544dadcecf2f7d9fb23cabe4647802ed2c1b9349035a738419282b512fc85ac6ad0bca4a34e282fd1fcc9665f4fcc4ca079487cc638cba0d8e1c9403bdc0534b7e911c1fabc1b8c7cc74759cf826790cf10993b8e", 0x7e}, {&(0x7f00000004c0)="8f15e60fc035e570faeb924a4b2fd022ecee5fbac0a9d66b5a5f64925f667c22b21374b5d0affc3f763e74b4cd7c286ccc22f965e308c98983128b5960003fe352bd402b22b43be963464dd10f9ce8d556539cdff3f65f6af33055328ef458002ff23bea", 0x64}, {&(0x7f00000003c0)="34db8fae02d0b6881575804f47", 0xd}, {&(0x7f0000000540)="0a126f59ad2a84beca50369a0e5be01b0b5111b73cd45a9af4dce195066dd4", 0x1f}], 0x8, &(0x7f0000000600)=[{0x30, 0x1, 0x2, "cf0e152b8e51dd70dfd785753a2cd54001c59bbd86d8f41a7277e4b6"}], 0x30}, 0x0, 0x80, 0x1, {0x0, r6}}, 0x40000000) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fadvise64(0xffffffffffffffff, 0x0, 0x7c80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000935b}, 0x4690}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2411.561286] FAULT_INJECTION: forcing a failure. [ 2411.561286] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.564046] CPU: 0 PID: 11159 Comm: syz-executor.1 Not tainted 5.10.192 #1 [ 2411.565511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.567266] Call Trace: [ 2411.567825] dump_stack+0x107/0x167 [ 2411.568595] should_fail.cold+0x5/0xa [ 2411.569396] ? create_object.isra.0+0x3a/0xa20 [ 2411.570365] should_failslab+0x5/0x20 [ 2411.571182] kmem_cache_alloc+0x5b/0x310 [ 2411.572061] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2411.573228] create_object.isra.0+0x3a/0xa20 [ 2411.574173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2411.575266] __kmalloc+0x16e/0x390 [ 2411.576038] cgroup_mkdir+0x254/0xf50 [ 2411.576864] ? cgroup_destroy_locked+0x710/0x710 [ 2411.577878] kernfs_iop_mkdir+0x14d/0x1e0 [ 2411.578782] vfs_mkdir+0x493/0x700 [ 2411.579549] do_mkdirat+0x150/0x2b0 [ 2411.580332] ? user_path_create+0xf0/0xf0 [ 2411.581223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2411.582345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2411.583453] do_syscall_64+0x33/0x40 [ 2411.584254] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2411.585350] RIP: 0033:0x7f9019290b19 [ 2411.586150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2411.589989] RSP: 002b:00007f9016806188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2411.591559] RAX: ffffffffffffffda RBX: 00007f90193a3f60 RCX: 00007f9019290b19 [ 2411.593023] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2411.594499] RBP: 00007f90168061d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.595985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2411.597484] R13: 00007ffe488f908f R14: 00007f9016806300 R15: 0000000000022000 [ 2426.177453] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888046ca95b0 (size 144): comm "syz-executor.3", pid 11148, jiffies 4297078300 (age 24.060s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 db 5d eb 64 00 00 00 00 .........].d.... 3f 39 04 27 00 00 00 00 db 5d eb 64 00 00 00 00 ?9.'.....].d.... backtrace: [<00000000cdd5dfd0>] __kernfs_iattrs+0xbc/0x470 [<0000000033b75de9>] kernfs_xattr_set+0x2b/0x80 [<00000000fd0e09d8>] selinux_kernfs_init_security+0x26d/0x4c0 [<00000000791d4215>] security_kernfs_init_security+0x4e/0xb0 [<0000000073e1c8a5>] __kernfs_new_node+0x531/0x860 [<0000000019f9ddb6>] kernfs_create_dir_ns+0x9c/0x230 [<000000008a8b7dac>] cgroup_mkdir+0x318/0xf50 [<00000000ba00df31>] kernfs_iop_mkdir+0x14d/0x1e0 [<00000000a5808896>] vfs_mkdir+0x493/0x700 [<00000000cb567b58>] do_mkdirat+0x150/0x2b0 [<00000000f2aee6f3>] do_syscall_64+0x33/0x40 [<000000004245f5ce>] entry_SYSCALL_64_after_hwframe+0x62/0xc7 BUG: leak checking failed VM DIAGNOSIS: 14:30:12 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff812fec80 RCX=1ffff1100d9c1301 RDX=1ffff1100d9c1354 RSI=ffffffff83e3a683 RDI=ffff88806ce09b10 RBP=ffff88806ce09ae0 RSP=ffff88806ce09a50 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff1100d9c1338 R12=ffff88806ce09b10 R13=0000000000000000 R14=ffffffff84e32280 R15=ffff888046491290 RIP=ffffffff812fec8a RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007eff2cbc7c20 CR3=000000001a520000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041853edb00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e53320 RBX=0000000000000001 RCX=ffffffff83e3b3dc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e53928 RBP=ffffed100112e000 RSP=ffff88800897fe70 R8 =0000000000000001 R9 =ffff88806cf3c16b R10=ffffed100d9e782d R11=0000000000000001 R12=0000000000000001 R13=ffffffff856715c8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5332e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffddd38cb78 CR3=0000000015bc0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934343120657a697328203062353961 XMM03=3120646970202c22332e726f74756365 XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20303020303020303020303020303020 XMM06=65747962203233207473726966282070 XMM07=34322065676128203030333837303739 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000