EMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r4) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRESHEX=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES8=r3, @ANYRES64=r2, @ANYBLOB="08000100", @ANYRESOCT=r1, @ANYBLOB="08000100", @ANYRES32, @ANYRES8=r3], 0x4c}}, 0x0) (rerun: 32) [ 2801.532941] CPU: 1 PID: 22390 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2801.540933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2801.550380] Call Trace: [ 2801.552968] dump_stack+0x1b2/0x281 [ 2801.556594] should_fail.cold+0x10a/0x149 [ 2801.560826] should_failslab+0xd6/0x130 [ 2801.564814] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2801.569911] __kmalloc_node+0x38/0x70 [ 2801.573714] blk_mq_alloc_tag_set+0x27c/0x910 [ 2801.578211] nbd_dev_add+0x2ae/0x800 [ 2801.581923] ? nbd_send_cmd+0x11f0/0x11f0 [ 2801.586070] ? ns_capable_common+0x127/0x150 [ 2801.590824] nbd_genl_connect+0x3a4/0x13e0 [ 2801.595062] ? lock_acquire+0x170/0x3f0 [ 2801.599036] ? nbd_xmit_timeout+0x500/0x500 [ 2801.603358] ? validate_nla+0x192/0x5e0 [ 2801.607331] ? nla_parse+0x157/0x1f0 [ 2801.611046] genl_family_rcv_msg+0x572/0xb20 [ 2801.615459] ? genl_rcv+0x40/0x40 [ 2801.618908] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2801.624352] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2801.629451] ? trace_hardirqs_on+0x10/0x10 [ 2801.633694] genl_rcv_msg+0xaf/0x140 [ 2801.637412] netlink_rcv_skb+0x125/0x390 [ 2801.641467] ? genl_family_rcv_msg+0xb20/0xb20 [ 2801.646044] ? netlink_ack+0x9a0/0x9a0 [ 2801.649926] ? lock_acquire+0x170/0x3f0 [ 2801.653985] genl_rcv+0x24/0x40 [ 2801.657259] netlink_unicast+0x437/0x610 [ 2801.661317] ? netlink_sendskb+0xd0/0xd0 [ 2801.665368] ? __check_object_size+0x179/0x230 [ 2801.669940] netlink_sendmsg+0x648/0xbc0 [ 2801.674000] ? nlmsg_notify+0x1b0/0x1b0 [ 2801.677970] ? kernel_recvmsg+0x210/0x210 [ 2801.682114] ? security_socket_sendmsg+0x83/0xb0 [ 2801.686862] ? nlmsg_notify+0x1b0/0x1b0 [ 2801.690831] sock_sendmsg+0xb5/0x100 [ 2801.694547] ___sys_sendmsg+0x6c8/0x800 [ 2801.698514] ? get_pid_task+0x91/0x130 [ 2801.702392] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2801.707140] ? lock_downgrade+0x740/0x740 [ 2801.711285] ? __fget+0x23e/0x3e0 [ 2801.714730] ? lock_acquire+0x170/0x3f0 [ 2801.718700] ? lock_downgrade+0x740/0x740 [ 2801.722857] ? __fdget+0x19b/0x1f0 [ 2801.726391] ? sockfd_lookup_light+0xb2/0x160 [ 2801.730876] __sys_sendmsg+0xa3/0x120 [ 2801.734667] ? SyS_shutdown+0x160/0x160 [ 2801.738637] ? wait_for_completion_io+0x10/0x10 [ 2801.743303] ? SyS_read+0x210/0x210 [ 2801.746923] SyS_sendmsg+0x27/0x40 [ 2801.750454] ? __sys_sendmsg+0x120/0x120 [ 2801.754510] do_syscall_64+0x1d5/0x640 [ 2801.758395] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2801.763572] RIP: 0033:0x7f56575860a9 [ 2801.767279] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2801.774975] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 04:13:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000010}, 0x2004c810) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) 04:13:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0, 0x0, r3, r4, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r3, r6, r4, r4, r4], 0x1f, 0x5, 0x4}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6e64}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc8c4}, 0x8041) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r7, @ANYRES16=r10, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYRES16=r0, @ANYRES16=r9, @ANYBLOB="08000100", @ANYRES32, @ANYRES8=r0, @ANYRES32, @ANYBLOB="71000100", @ANYRES32, @ANYBLOB="710200000000000000280002", @ANYRES8=r8], 0x4c}}, 0x44844) 04:13:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r4) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRESHEX=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES8=r3, @ANYRES64=r2, @ANYBLOB="08000100", @ANYRESOCT=r1, @ANYBLOB="08000100", @ANYRES32, @ANYRES8=r3], 0x4c}}, 0x0) 04:13:05 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 8) 04:13:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="16002dbd7000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r6, 0x0, 0x0, r7, r8, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r7, r10, r8, r8, r8], 0x1f, 0x5, 0x4}) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_ADD_CTX(r9, 0xc0086420, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x8c, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8}, {0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4800}, 0x51) (async) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x14, r14, 0x30b}, 0x14}}, 0x0) [ 2801.782236] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2801.789494] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2801.796761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2801.804194] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2801.816834] nbd: failed to add new device 04:13:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000010}, 0x2004c810) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000010}, 0x2004c810) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) 04:13:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="16002dbd7000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r6, 0x0, 0x0, r7, r8, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r7, r10, r8, r8, r8], 0x1f, 0x5, 0x4}) (async, rerun: 64) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r9, 0xc0086420, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x8c, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8}, {0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4800}, 0x51) (async, rerun: 32) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x14, r14, 0x30b}, 0x14}}, 0x0) [ 2801.934942] FAULT_INJECTION: forcing a failure. [ 2801.934942] name failslab, interval 1, probability 0, space 0, times 0 [ 2801.957149] CPU: 1 PID: 22427 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2801.965060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2801.974411] Call Trace: [ 2801.977001] dump_stack+0x1b2/0x281 [ 2801.980629] should_fail.cold+0x10a/0x149 [ 2801.984779] should_failslab+0xd6/0x130 [ 2801.988751] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2801.993854] __kmalloc_node+0x38/0x70 [ 2801.997653] blk_mq_alloc_tag_set+0x30f/0x910 [ 2802.002148] nbd_dev_add+0x2ae/0x800 [ 2802.005855] ? nbd_send_cmd+0x11f0/0x11f0 [ 2802.009993] ? ns_capable_common+0x127/0x150 [ 2802.014489] nbd_genl_connect+0x3a4/0x13e0 [ 2802.018719] ? lock_acquire+0x170/0x3f0 [ 2802.022697] ? nbd_xmit_timeout+0x500/0x500 [ 2802.027041] ? validate_nla+0x192/0x5e0 [ 2802.031009] ? nla_parse+0x157/0x1f0 [ 2802.034719] genl_family_rcv_msg+0x572/0xb20 [ 2802.039127] ? genl_rcv+0x40/0x40 [ 2802.042576] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2802.048026] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2802.053122] ? trace_hardirqs_on+0x10/0x10 [ 2802.057359] genl_rcv_msg+0xaf/0x140 [ 2802.061071] netlink_rcv_skb+0x125/0x390 [ 2802.065132] ? genl_family_rcv_msg+0xb20/0xb20 [ 2802.069708] ? netlink_ack+0x9a0/0x9a0 [ 2802.073588] ? lock_acquire+0x170/0x3f0 [ 2802.077564] genl_rcv+0x24/0x40 [ 2802.080833] netlink_unicast+0x437/0x610 [ 2802.084890] ? netlink_sendskb+0xd0/0xd0 [ 2802.088942] ? __check_object_size+0x179/0x230 [ 2802.093518] netlink_sendmsg+0x648/0xbc0 [ 2802.097575] ? nlmsg_notify+0x1b0/0x1b0 [ 2802.101539] ? kernel_recvmsg+0x210/0x210 [ 2802.105683] ? security_socket_sendmsg+0x83/0xb0 [ 2802.110430] ? nlmsg_notify+0x1b0/0x1b0 [ 2802.114398] sock_sendmsg+0xb5/0x100 [ 2802.118107] ___sys_sendmsg+0x6c8/0x800 [ 2802.122074] ? get_pid_task+0x91/0x130 [ 2802.125952] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2802.130701] ? lock_downgrade+0x740/0x740 [ 2802.134844] ? __fget+0x23e/0x3e0 [ 2802.138294] ? lock_acquire+0x170/0x3f0 [ 2802.142265] ? lock_downgrade+0x740/0x740 [ 2802.146413] ? __fdget+0x19b/0x1f0 [ 2802.149951] ? sockfd_lookup_light+0xb2/0x160 [ 2802.154441] __sys_sendmsg+0xa3/0x120 [ 2802.158240] ? SyS_shutdown+0x160/0x160 [ 2802.162209] ? wait_for_completion_io+0x10/0x10 [ 2802.166879] ? SyS_read+0x210/0x210 [ 2802.170512] SyS_sendmsg+0x27/0x40 [ 2802.174047] ? __sys_sendmsg+0x120/0x120 [ 2802.178100] do_syscall_64+0x1d5/0x640 [ 2802.181992] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2802.187173] RIP: 0033:0x7f56575860a9 [ 2802.190877] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2802.198583] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2802.205842] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2802.213104] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2802.220372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2802.227646] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2802.254942] nbd: failed to add new device [ 2802.259461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2802.268402] nbd: must specify a size in bytes for the device 04:13:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0xfffffc01, 0x9, 0x81, 0x7fffffff, 0x38, 0x401, 0x9772, 0x7], 0x8, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[0x273147c5, 0x9, 0x1, 0xd03, 0xce44, 0x1, 0x5, 0x7f, 0xc0000000], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2b7}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe13}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004094}, 0x41) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8004) 04:13:05 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 1) 04:13:05 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 9) 04:13:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000010}, 0x2004c810) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000010}, 0x2004c810) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) 04:13:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08008493", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="16fcb1012f0cede8000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, 0x0, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r11, 0x0, 0x0, 0x0], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000500)=[r12, 0x0, 0x0, r13, r14, 0x0, 0x0], &(0x7f00000006c0), 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r15, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r13, r16, r14, r14, r14], 0x1f, 0x5, 0x4}) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r10}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r15}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001800}, 0x4005) 04:13:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000325bd7000fddbdf25020000000800240000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x30b, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) [ 2802.355931] FAULT_INJECTION: forcing a failure. [ 2802.355931] name failslab, interval 1, probability 0, space 0, times 0 [ 2802.377853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2802.384765] CPU: 0 PID: 22470 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 2802.394438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2802.403786] Call Trace: 04:13:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000325bd7000fddbdf25020000000800240000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x30b, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000325bd7000fddbdf25020000000800240000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x30b, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) (async) [ 2802.406370] dump_stack+0x1b2/0x281 [ 2802.407380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2802.409998] should_fail.cold+0x10a/0x149 [ 2802.422604] should_failslab+0xd6/0x130 [ 2802.426578] kmem_cache_alloc_node+0x263/0x410 [ 2802.430841] FAULT_INJECTION: forcing a failure. [ 2802.430841] name failslab, interval 1, probability 0, space 0, times 0 [ 2802.431154] __alloc_skb+0x5c/0x510 [ 2802.431174] netlink_sendmsg+0x91e/0xbc0 [ 2802.431187] ? nlmsg_notify+0x1b0/0x1b0 [ 2802.431195] ? kernel_recvmsg+0x210/0x210 [ 2802.458206] ? security_socket_sendmsg+0x83/0xb0 [ 2802.462950] ? nlmsg_notify+0x1b0/0x1b0 [ 2802.466908] sock_sendmsg+0xb5/0x100 [ 2802.470606] ___sys_sendmsg+0x6c8/0x800 [ 2802.474562] ? get_pid_task+0x91/0x130 [ 2802.478441] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2802.483194] ? lock_downgrade+0x740/0x740 [ 2802.487331] ? __fget+0x23e/0x3e0 [ 2802.490771] ? lock_acquire+0x170/0x3f0 [ 2802.494734] ? lock_downgrade+0x740/0x740 [ 2802.498871] ? __fdget+0x19b/0x1f0 [ 2802.502391] ? sockfd_lookup_light+0xb2/0x160 04:13:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01e47b9bc8f4c79127687e58deff43ca059e9c9528b130e61e1377996a0e79b0cc084ebd5e65f5fbe0d6d9e5e6aeaa87ccfe7722744f52afcaac13a789b2ddb5776866c191448f453c5aa7cebb56cacd4d5ca6b8155f26dd9de3dab2c1a72cb05b57c66789bdad6e42b955ad07224031691295ee75ee51b4f45300"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24042804}, 0x200208c0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xe095) [ 2802.506897] __sys_sendmsg+0xa3/0x120 [ 2802.510698] ? SyS_shutdown+0x160/0x160 [ 2802.514669] ? wait_for_completion_io+0x10/0x10 [ 2802.519340] ? SyS_read+0x210/0x210 [ 2802.522964] SyS_sendmsg+0x27/0x40 [ 2802.526492] ? __sys_sendmsg+0x120/0x120 [ 2802.530540] do_syscall_64+0x1d5/0x640 [ 2802.534421] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2802.539693] RIP: 0033:0x7f61c56e40a9 [ 2802.543471] RSP: 002b:00007f61c3c56168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2802.551164] RAX: ffffffffffffffda RBX: 00007f61c5803f80 RCX: 00007f61c56e40a9 [ 2802.558413] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2802.565669] RBP: 00007f61c3c561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2802.572958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2802.580212] R13: 00007ffe314926cf R14: 00007f61c3c56300 R15: 0000000000022000 [ 2802.587489] CPU: 1 PID: 22478 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2802.595370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2802.604718] Call Trace: [ 2802.607301] dump_stack+0x1b2/0x281 [ 2802.610941] should_fail.cold+0x10a/0x149 [ 2802.615100] should_failslab+0xd6/0x130 [ 2802.619073] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2802.624155] __kmalloc_node_track_caller+0x38/0x70 [ 2802.629059] __alloc_skb+0x96/0x510 [ 2802.632664] kobject_uevent_env+0x882/0xf30 [ 2802.636975] nbd_config_put+0x50a/0x6c0 [ 2802.640935] ? wait_for_completion_io+0x10/0x10 [ 2802.645585] nbd_genl_connect+0xcb9/0x13e0 [ 2802.649796] ? nbd_xmit_timeout+0x500/0x500 [ 2802.654098] ? validate_nla+0x192/0x5e0 [ 2802.658052] genl_family_rcv_msg+0x572/0xb20 [ 2802.662443] ? genl_rcv+0x40/0x40 [ 2802.665888] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2802.671333] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2802.676539] ? trace_hardirqs_on+0x10/0x10 [ 2802.680757] genl_rcv_msg+0xaf/0x140 [ 2802.684448] netlink_rcv_skb+0x125/0x390 [ 2802.688490] ? genl_family_rcv_msg+0xb20/0xb20 [ 2802.693070] ? netlink_ack+0x9a0/0x9a0 [ 2802.696949] ? lock_acquire+0x170/0x3f0 [ 2802.700906] genl_rcv+0x24/0x40 [ 2802.704162] netlink_unicast+0x437/0x610 [ 2802.708216] ? netlink_sendskb+0xd0/0xd0 [ 2802.712263] ? __check_object_size+0x179/0x230 [ 2802.716823] netlink_sendmsg+0x648/0xbc0 [ 2802.720874] ? nlmsg_notify+0x1b0/0x1b0 [ 2802.724831] ? kernel_recvmsg+0x210/0x210 [ 2802.728962] ? security_socket_sendmsg+0x83/0xb0 [ 2802.733695] ? nlmsg_notify+0x1b0/0x1b0 [ 2802.737651] sock_sendmsg+0xb5/0x100 [ 2802.741351] ___sys_sendmsg+0x6c8/0x800 [ 2802.745302] ? get_pid_task+0x91/0x130 [ 2802.749169] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2802.753914] ? lock_downgrade+0x740/0x740 [ 2802.758037] ? __fget+0x23e/0x3e0 [ 2802.761468] ? lock_acquire+0x170/0x3f0 [ 2802.765419] ? lock_downgrade+0x740/0x740 [ 2802.769547] ? __fdget+0x19b/0x1f0 [ 2802.773062] ? sockfd_lookup_light+0xb2/0x160 [ 2802.777531] __sys_sendmsg+0xa3/0x120 [ 2802.781308] ? SyS_shutdown+0x160/0x160 [ 2802.785258] ? wait_for_completion_io+0x10/0x10 [ 2802.789911] ? SyS_read+0x210/0x210 [ 2802.793514] SyS_sendmsg+0x27/0x40 [ 2802.797027] ? __sys_sendmsg+0x120/0x120 [ 2802.801067] do_syscall_64+0x1d5/0x640 04:13:06 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 2) [ 2802.804935] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2802.810101] RIP: 0033:0x7f56575860a9 [ 2802.813788] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2802.821471] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2802.828803] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2802.836047] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2802.843292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2802.850660] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000325bd7000fddbdf25020000000800240000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x30b, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000325bd7000fddbdf25020000000800240000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x30b, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) (async) 04:13:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08008493", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="16fcb1012f0cede8000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, 0x0, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r11, 0x0, 0x0, 0x0], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000500)=[r12, 0x0, 0x0, r13, r14, 0x0, 0x0], &(0x7f00000006c0), 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r15, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r13, r16, r14, r14, r14], 0x1f, 0x5, 0x4}) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r10}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r15}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001800}, 0x4005) 04:13:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01e47b9bc8f4c79127687e58deff43ca059e9c9528b130e61e1377996a0e79b0cc084ebd5e65f5fbe0d6d9e5e6aeaa87ccfe7722744f52afcaac13a789b2ddb5776866c191448f453c5aa7cebb56cacd4d5ca6b8155f26dd9de3dab2c1a72cb05b57c66789bdad6e42b955ad07224031691295ee75ee51b4f45300"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24042804}, 0x200208c0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xe095) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01e47b9bc8f4c79127687e58deff43ca059e9c9528b130e61e1377996a0e79b0cc084ebd5e65f5fbe0d6d9e5e6aeaa87ccfe7722744f52afcaac13a789b2ddb5776866c191448f453c5aa7cebb56cacd4d5ca6b8155f26dd9de3dab2c1a72cb05b57c66789bdad6e42b955ad07224031691295ee75ee51b4f45300"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24042804}, 0x200208c0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xe095) (async) 04:13:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:13:06 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 10) 04:13:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="6d93bedd683779b7662b5037b51f03e40b49003e0974bafb8a48f15ca43789ab9a37425488483619"], 0x14}}, 0x0) [ 2802.928003] FAULT_INJECTION: forcing a failure. [ 2802.928003] name failslab, interval 1, probability 0, space 0, times 0 [ 2802.989412] CPU: 0 PID: 22521 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0 [ 2802.997315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2803.006675] Call Trace: [ 2803.007857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2803.009258] dump_stack+0x1b2/0x281 [ 2803.009271] should_fail.cold+0x10a/0x149 [ 2803.025498] should_failslab+0xd6/0x130 [ 2803.029473] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2803.034584] __kmalloc_node_track_caller+0x38/0x70 04:13:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01e47b9bc8f4c79127687e58deff43ca059e9c9528b130e61e1377996a0e79b0cc084ebd5e65f5fbe0d6d9e5e6aeaa87ccfe7722744f52afcaac13a789b2ddb5776866c191448f453c5aa7cebb56cacd4d5ca6b8155f26dd9de3dab2c1a72cb05b57c66789bdad6e42b955ad07224031691295ee75ee51b4f45300"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24042804}, 0x200208c0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0xe095) [ 2803.039521] __alloc_skb+0x96/0x510 [ 2803.041048] FAULT_INJECTION: forcing a failure. [ 2803.041048] name failslab, interval 1, probability 0, space 0, times 0 [ 2803.043150] netlink_sendmsg+0x91e/0xbc0 [ 2803.043163] ? nlmsg_notify+0x1b0/0x1b0 [ 2803.043169] ? kernel_recvmsg+0x210/0x210 [ 2803.043181] ? security_socket_sendmsg+0x83/0xb0 [ 2803.043188] ? nlmsg_notify+0x1b0/0x1b0 [ 2803.043196] sock_sendmsg+0xb5/0x100 [ 2803.043203] ___sys_sendmsg+0x6c8/0x800 [ 2803.043213] ? get_pid_task+0x91/0x130 [ 2803.043227] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2803.091557] ? lock_downgrade+0x740/0x740 [ 2803.095701] ? __fget+0x23e/0x3e0 [ 2803.099147] ? lock_acquire+0x170/0x3f0 [ 2803.103103] ? lock_downgrade+0x740/0x740 [ 2803.107250] ? __fdget+0x19b/0x1f0 [ 2803.110780] ? sockfd_lookup_light+0xb2/0x160 [ 2803.115262] __sys_sendmsg+0xa3/0x120 [ 2803.119044] ? SyS_shutdown+0x160/0x160 [ 2803.123002] ? wait_for_completion_io+0x10/0x10 [ 2803.127664] ? SyS_read+0x210/0x210 [ 2803.131277] SyS_sendmsg+0x27/0x40 [ 2803.134803] ? __sys_sendmsg+0x120/0x120 [ 2803.138865] do_syscall_64+0x1d5/0x640 [ 2803.142758] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2803.147939] RIP: 0033:0x7f61c56e40a9 [ 2803.151636] RSP: 002b:00007f61c3c56168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2803.159327] RAX: ffffffffffffffda RBX: 00007f61c5803f80 RCX: 00007f61c56e40a9 [ 2803.166578] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2803.173829] RBP: 00007f61c3c561d0 R08: 0000000000000000 R09: 0000000000000000 [ 2803.181078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 04:13:06 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 3) 04:13:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) 04:13:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="6d93bedd683779b7662b5037b51f03e40b49003e0974bafb8a48f15ca43789ab9a37425488483619"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="6d93bedd683779b7662b5037b51f03e40b49003e0974bafb8a48f15ca43789ab9a37425488483619"], 0x14}}, 0x0) (async) [ 2803.188668] R13: 00007ffe314926cf R14: 00007f61c3c56300 R15: 0000000000022000 [ 2803.195937] CPU: 1 PID: 22547 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2803.203820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2803.213170] Call Trace: [ 2803.215757] dump_stack+0x1b2/0x281 [ 2803.219392] should_fail.cold+0x10a/0x149 [ 2803.223538] should_failslab+0xd6/0x130 [ 2803.227516] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2803.232620] __kmalloc_node_track_caller+0x38/0x70 [ 2803.237556] __alloc_skb+0x96/0x510 [ 2803.241184] kobject_uevent_env+0x882/0xf30 [ 2803.245513] nbd_config_put+0x50a/0x6c0 [ 2803.249486] ? wait_for_completion_io+0x10/0x10 [ 2803.254153] nbd_genl_connect+0xcb9/0x13e0 [ 2803.258383] ? nbd_xmit_timeout+0x500/0x500 [ 2803.262689] ? validate_nla+0x192/0x5e0 [ 2803.266651] genl_family_rcv_msg+0x572/0xb20 [ 2803.271036] ? genl_rcv+0x40/0x40 [ 2803.274473] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2803.279911] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2803.284990] ? trace_hardirqs_on+0x10/0x10 [ 2803.289206] genl_rcv_msg+0xaf/0x140 [ 2803.292906] netlink_rcv_skb+0x125/0x390 [ 2803.296956] ? genl_family_rcv_msg+0xb20/0xb20 [ 2803.301514] ? netlink_ack+0x9a0/0x9a0 [ 2803.305379] ? lock_acquire+0x170/0x3f0 [ 2803.309343] genl_rcv+0x24/0x40 [ 2803.312610] netlink_unicast+0x437/0x610 [ 2803.316661] ? netlink_sendskb+0xd0/0xd0 [ 2803.320708] ? __check_object_size+0x179/0x230 [ 2803.325269] netlink_sendmsg+0x648/0xbc0 [ 2803.329313] ? nlmsg_notify+0x1b0/0x1b0 [ 2803.333269] ? kernel_recvmsg+0x210/0x210 [ 2803.337411] ? security_socket_sendmsg+0x83/0xb0 [ 2803.342152] ? nlmsg_notify+0x1b0/0x1b0 [ 2803.346118] sock_sendmsg+0xb5/0x100 [ 2803.349822] ___sys_sendmsg+0x6c8/0x800 [ 2803.353784] ? get_pid_task+0x91/0x130 [ 2803.357649] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2803.362384] ? lock_downgrade+0x740/0x740 [ 2803.366513] ? __fget+0x23e/0x3e0 [ 2803.369953] ? lock_acquire+0x170/0x3f0 [ 2803.373905] ? lock_downgrade+0x740/0x740 [ 2803.378047] ? __fdget+0x19b/0x1f0 [ 2803.381571] ? sockfd_lookup_light+0xb2/0x160 [ 2803.386042] __sys_sendmsg+0xa3/0x120 [ 2803.389830] ? SyS_shutdown+0x160/0x160 [ 2803.393796] ? wait_for_completion_io+0x10/0x10 [ 2803.398471] ? SyS_read+0x210/0x210 [ 2803.402090] SyS_sendmsg+0x27/0x40 [ 2803.405615] ? __sys_sendmsg+0x120/0x120 [ 2803.409659] do_syscall_64+0x1d5/0x640 [ 2803.413533] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2803.418706] RIP: 0033:0x7f56575860a9 [ 2803.422395] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2803.430079] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2803.437333] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2803.444587] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2803.451838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2803.459093] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08008493", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="16fcb1012f0cede8000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, 0x0, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r11, 0x0, 0x0, 0x0], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000500)=[r12, 0x0, 0x0, r13, r14, 0x0, 0x0], &(0x7f00000006c0), 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r15, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r13, r16, r14, r14, r14], 0x1f, 0x5, 0x4}) (async) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r10}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r10}, {0x8}, {0x8, 0x1, r15}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001800}, 0x4005) 04:13:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:13:07 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="6d93bedd683779b7662b5037b51f03e40b49003e0974bafb8a48f15ca43789ab9a37425488483619"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="6d93bedd683779b7662b5037b51f03e40b49003e0974bafb8a48f15ca43789ab9a37425488483619"], 0x14}}, 0x0) (async) 04:13:07 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 11) 04:13:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xe67, 0x8000, 0x2], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) 04:13:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000f3fae17c5a7dfb3e6a"], 0x14}}, 0x0) 04:13:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xe67, 0x8000, 0x2], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) 04:13:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0xb20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'NLBL_UNLBL\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0xc044) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000d5b14907bbf5d1ead7ef2f79941d2488b611d192773bd84c2e0aaadb36915a3f6ab881af6a578419e3cfd4efb0a664897886c8a337245e7f7f77df", @ANYRES16=r3, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) 04:13:07 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) 04:13:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000f3fae17c5a7dfb3e6a"], 0x14}}, 0x0) [ 2803.685726] FAULT_INJECTION: forcing a failure. [ 2803.685726] name failslab, interval 1, probability 0, space 0, times 0 [ 2803.707529] CPU: 1 PID: 22602 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2803.715436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2803.724785] Call Trace: [ 2803.727378] dump_stack+0x1b2/0x281 [ 2803.731010] should_fail.cold+0x10a/0x149 04:13:07 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r1, r4, r2, r2, r2], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) [ 2803.735156] should_failslab+0xd6/0x130 [ 2803.739125] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2803.744231] sbitmap_queue_init_node+0x27f/0x5d0 [ 2803.748984] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2803.754260] blk_mq_init_tags+0xf4/0x280 [ 2803.758325] blk_mq_alloc_rq_map+0x90/0x220 [ 2803.762648] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2803.767145] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2803.771643] nbd_dev_add+0x2ae/0x800 [ 2803.775458] ? nbd_send_cmd+0x11f0/0x11f0 [ 2803.779606] ? ns_capable_common+0x127/0x150 [ 2803.784014] nbd_genl_connect+0x3a4/0x13e0 [ 2803.788247] ? lock_acquire+0x170/0x3f0 [ 2803.792216] ? nbd_xmit_timeout+0x500/0x500 [ 2803.796522] ? validate_nla+0x192/0x5e0 [ 2803.800476] ? nla_parse+0x157/0x1f0 [ 2803.804280] genl_family_rcv_msg+0x572/0xb20 [ 2803.808675] ? genl_rcv+0x40/0x40 [ 2803.812113] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2803.817547] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2803.822833] ? trace_hardirqs_on+0x10/0x10 [ 2803.827226] genl_rcv_msg+0xaf/0x140 [ 2803.830918] netlink_rcv_skb+0x125/0x390 [ 2803.834969] ? genl_family_rcv_msg+0xb20/0xb20 [ 2803.839547] ? netlink_ack+0x9a0/0x9a0 [ 2803.843419] ? lock_acquire+0x170/0x3f0 [ 2803.847374] genl_rcv+0x24/0x40 [ 2803.850640] netlink_unicast+0x437/0x610 [ 2803.854690] ? netlink_sendskb+0xd0/0xd0 [ 2803.858740] ? __check_object_size+0x179/0x230 [ 2803.863322] netlink_sendmsg+0x648/0xbc0 [ 2803.867370] ? nlmsg_notify+0x1b0/0x1b0 [ 2803.871322] ? kernel_recvmsg+0x210/0x210 [ 2803.875457] ? security_socket_sendmsg+0x83/0xb0 [ 2803.880191] ? nlmsg_notify+0x1b0/0x1b0 [ 2803.884150] sock_sendmsg+0xb5/0x100 [ 2803.887949] ___sys_sendmsg+0x6c8/0x800 [ 2803.891926] ? get_pid_task+0x91/0x130 [ 2803.895821] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2803.900560] ? lock_downgrade+0x740/0x740 [ 2803.904694] ? __fget+0x23e/0x3e0 [ 2803.908130] ? lock_acquire+0x170/0x3f0 [ 2803.912083] ? lock_downgrade+0x740/0x740 [ 2803.916321] ? __fdget+0x19b/0x1f0 [ 2803.920067] ? sockfd_lookup_light+0xb2/0x160 [ 2803.924544] __sys_sendmsg+0xa3/0x120 [ 2803.928323] ? SyS_shutdown+0x160/0x160 [ 2803.932278] ? wait_for_completion_io+0x10/0x10 [ 2803.936927] ? SyS_read+0x210/0x210 [ 2803.940535] SyS_sendmsg+0x27/0x40 [ 2803.944052] ? __sys_sendmsg+0x120/0x120 [ 2803.948098] do_syscall_64+0x1d5/0x640 [ 2803.951980] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2803.957180] RIP: 0033:0x7f56575860a9 [ 2803.960873] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2803.968577] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2803.975866] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2803.983124] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2803.990464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2803.997724] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2804.077041] blk-mq: reduced tag depth (128 -> 64) 04:13:07 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 12) 04:13:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000f3fae17c5a7dfb3e6a"], 0x14}}, 0x0) 04:13:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0xb20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'NLBL_UNLBL\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0xc044) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000d5b14907bbf5d1ead7ef2f79941d2488b611d192773bd84c2e0aaadb36915a3f6ab881af6a578419e3cfd4efb0a664897886c8a337245e7f7f77df", @ANYRES16=r3, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) 04:13:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0xe67, 0x8000, 0x2], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) 04:13:07 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async, rerun: 32) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:07 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r1, r4, r2, r2, r2], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r1, r4, r2, r2, r2], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) [ 2804.194715] FAULT_INJECTION: forcing a failure. [ 2804.194715] name failslab, interval 1, probability 0, space 0, times 0 [ 2804.219503] CPU: 1 PID: 22676 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2804.227401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2804.236751] Call Trace: [ 2804.239334] dump_stack+0x1b2/0x281 [ 2804.242958] should_fail.cold+0x10a/0x149 [ 2804.247102] should_failslab+0xd6/0x130 [ 2804.251072] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2804.256168] __kmalloc_node+0x38/0x70 [ 2804.259960] sbitmap_init_node+0x10c/0x3d0 [ 2804.264190] sbitmap_queue_init_node+0x37/0x5d0 [ 2804.268859] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2804.273866] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2804.279135] blk_mq_init_tags+0xf4/0x280 [ 2804.283187] blk_mq_alloc_rq_map+0x90/0x220 [ 2804.287499] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2804.291984] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2804.296482] nbd_dev_add+0x2ae/0x800 [ 2804.300191] ? nbd_send_cmd+0x11f0/0x11f0 [ 2804.304338] ? ns_capable_common+0x127/0x150 [ 2804.308745] nbd_genl_connect+0x3a4/0x13e0 [ 2804.312975] ? lock_acquire+0x170/0x3f0 [ 2804.316945] ? nbd_xmit_timeout+0x500/0x500 [ 2804.321263] ? validate_nla+0x192/0x5e0 [ 2804.325232] ? nla_parse+0x157/0x1f0 [ 2804.328944] genl_family_rcv_msg+0x572/0xb20 [ 2804.333352] ? genl_rcv+0x40/0x40 [ 2804.336804] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2804.342254] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2804.347352] ? trace_hardirqs_on+0x10/0x10 [ 2804.351593] genl_rcv_msg+0xaf/0x140 [ 2804.355306] netlink_rcv_skb+0x125/0x390 [ 2804.359368] ? genl_family_rcv_msg+0xb20/0xb20 [ 2804.363952] ? netlink_ack+0x9a0/0x9a0 [ 2804.367841] ? lock_acquire+0x170/0x3f0 [ 2804.371820] genl_rcv+0x24/0x40 [ 2804.375095] netlink_unicast+0x437/0x610 [ 2804.379156] ? netlink_sendskb+0xd0/0xd0 [ 2804.383213] ? __check_object_size+0x179/0x230 [ 2804.387798] netlink_sendmsg+0x648/0xbc0 [ 2804.391856] ? nlmsg_notify+0x1b0/0x1b0 [ 2804.395824] ? kernel_recvmsg+0x210/0x210 [ 2804.399972] ? security_socket_sendmsg+0x83/0xb0 [ 2804.404724] ? nlmsg_notify+0x1b0/0x1b0 [ 2804.408700] sock_sendmsg+0xb5/0x100 [ 2804.412413] ___sys_sendmsg+0x6c8/0x800 [ 2804.416383] ? get_pid_task+0x91/0x130 [ 2804.420267] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2804.425023] ? lock_downgrade+0x740/0x740 [ 2804.429172] ? __fget+0x23e/0x3e0 [ 2804.432622] ? lock_acquire+0x170/0x3f0 [ 2804.436589] ? lock_downgrade+0x740/0x740 [ 2804.440739] ? __fdget+0x19b/0x1f0 [ 2804.444272] ? sockfd_lookup_light+0xb2/0x160 [ 2804.448766] __sys_sendmsg+0xa3/0x120 [ 2804.452564] ? SyS_shutdown+0x160/0x160 [ 2804.456535] ? wait_for_completion_io+0x10/0x10 [ 2804.461208] ? SyS_read+0x210/0x210 [ 2804.464831] SyS_sendmsg+0x27/0x40 [ 2804.468363] ? __sys_sendmsg+0x120/0x120 [ 2804.472418] do_syscall_64+0x1d5/0x640 [ 2804.476303] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2804.481482] RIP: 0033:0x7f56575860a9 [ 2804.485179] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2804.492882] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2804.500155] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2804.507419] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2804.514683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2804.521945] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2804.554659] blk-mq: reduced tag depth (128 -> 64) 04:13:08 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf25010000000c00078008000100", @ANYRES32, @ANYBLOB="0c00020003000000000000000c00050008000000000000000c000a002e2a245e242b792b0c000500020200000000000011000a004e4c424c5f43414c4950534f000000000c000200ffffffffffffffff0c0006000100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:08 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 13) 04:13:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0xb20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'NLBL_UNLBL\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0xc044) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000d5b14907bbf5d1ead7ef2f79941d2488b611d192773bd84c2e0aaadb36915a3f6ab881af6a578419e3cfd4efb0a664897886c8a337245e7f7f77df", @ANYRES16=r3, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0xb20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'NLBL_UNLBL\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0xc044) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000d5b14907bbf5d1ead7ef2f79941d2488b611d192773bd84c2e0aaadb36915a3f6ab881af6a578419e3cfd4efb0a664897886c8a337245e7f7f77df", @ANYRES16=r3, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) (async) 04:13:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000001", @ANYRES16=r2, @ANYBLOB="16002dbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r8) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r8) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r10, r7, r7, r7], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x0, 0x4, 0x1], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022dbd7000fbdbdf250200000008000a006e6264000c00080009000000000000000c000300000000000100000008000a006e6264000c00060002000000000000001c00078008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:13:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:13:08 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r3) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf25010000000c00078008000100", @ANYRES32, @ANYBLOB="0c00020003000000000000000c00050008000000000000000c000a002e2a245e242b792b0c000500020200000000000011000a004e4c424c5f43414c4950534f000000000c000200ffffffffffffffff0c0006000100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:08 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r1, r4, r2, r2, r2], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) 04:13:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x100, 0x70bd2d}, 0x14}}, 0x0) [ 2804.711186] FAULT_INJECTION: forcing a failure. [ 2804.711186] name failslab, interval 1, probability 0, space 0, times 0 [ 2804.732292] CPU: 0 PID: 22727 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2804.740197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2804.749546] Call Trace: [ 2804.752137] dump_stack+0x1b2/0x281 [ 2804.755766] should_fail.cold+0x10a/0x149 [ 2804.759898] should_failslab+0xd6/0x130 [ 2804.763859] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2804.768949] __kmalloc_node_track_caller+0x38/0x70 [ 2804.773858] __alloc_skb+0x96/0x510 [ 2804.777463] kobject_uevent_env+0x882/0xf30 [ 2804.781763] nbd_config_put+0x50a/0x6c0 [ 2804.785728] ? wait_for_completion_io+0x10/0x10 [ 2804.790388] nbd_genl_connect+0xcb9/0x13e0 [ 2804.794731] ? nbd_xmit_timeout+0x500/0x500 [ 2804.799045] ? validate_nla+0x192/0x5e0 [ 2804.803025] genl_family_rcv_msg+0x572/0xb20 [ 2804.807436] ? genl_rcv+0x40/0x40 [ 2804.810876] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2804.816309] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2804.821482] ? trace_hardirqs_on+0x10/0x10 [ 2804.825803] genl_rcv_msg+0xaf/0x140 [ 2804.829497] netlink_rcv_skb+0x125/0x390 [ 2804.833533] ? genl_family_rcv_msg+0xb20/0xb20 [ 2804.839304] ? netlink_ack+0x9a0/0x9a0 [ 2804.843180] ? lock_acquire+0x170/0x3f0 [ 2804.847144] genl_rcv+0x24/0x40 [ 2804.850398] netlink_unicast+0x437/0x610 [ 2804.855159] ? netlink_sendskb+0xd0/0xd0 [ 2804.859203] ? __check_object_size+0x179/0x230 [ 2804.863777] netlink_sendmsg+0x648/0xbc0 [ 2804.867823] ? nlmsg_notify+0x1b0/0x1b0 [ 2804.871772] ? kernel_recvmsg+0x210/0x210 [ 2804.875908] ? security_socket_sendmsg+0x83/0xb0 [ 2804.880654] ? nlmsg_notify+0x1b0/0x1b0 [ 2804.884621] sock_sendmsg+0xb5/0x100 [ 2804.888327] ___sys_sendmsg+0x6c8/0x800 [ 2804.892280] ? get_pid_task+0x91/0x130 [ 2804.896143] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2804.900877] ? lock_downgrade+0x740/0x740 [ 2804.905002] ? __fget+0x23e/0x3e0 [ 2804.908436] ? lock_acquire+0x170/0x3f0 [ 2804.912384] ? lock_downgrade+0x740/0x740 [ 2804.916513] ? __fdget+0x19b/0x1f0 [ 2804.920027] ? sockfd_lookup_light+0xb2/0x160 [ 2804.924509] __sys_sendmsg+0xa3/0x120 [ 2804.928292] ? SyS_shutdown+0x160/0x160 [ 2804.932241] ? wait_for_completion_io+0x10/0x10 [ 2804.936892] ? SyS_read+0x210/0x210 [ 2804.940496] SyS_sendmsg+0x27/0x40 [ 2804.944013] ? __sys_sendmsg+0x120/0x120 [ 2804.948049] do_syscall_64+0x1d5/0x640 [ 2804.951916] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2804.957080] RIP: 0033:0x7f56575860a9 [ 2804.960767] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2804.968449] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2804.975694] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2804.982975] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2804.990225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2804.997470] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1000, 0x8], 0x2, 0x800}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x2c010) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x34}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008084) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB="ff01297c", @ANYRES32, @ANYBLOB="325111df6008136322b32ff0eec7edd323348e286b5af9229d3740903bc7ce98bcb7f7e368bd5625a62393e7b6219f9de91f3a71aa4d460063957cd23031d4a3efa1b388b31106e98725a8e21d4670c8c8c1506bed8d0adc8bda61d3ed60f94a059b54a1a8ba449facf4ca0ea749a8dd75f26f17f1f54ed1c2000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="8e6c9222dab378cceb3116c8c87c71b1a7cd9b7db1a5a9782032f6952b79d789592d67001fec93a2637c527fbcea42bd1be648bb1cdd040cfe8e7cd87529f6ddd731519ff9703fcc368745e118ae2e4e6cf55b1ea49c186d1f7141ea89e52115d3c5de414471b28e97c378a86001e54542ba0dbbcf62d2cea536f9d4818afdb93e2e36eca2bd1642fe13264f80dc5304636af74c381e651476f7489e045dd73407932f8e81b74c6f7d3f5a39009f", @ANYBLOB="0c0002"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 04:13:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x100, 0x70bd2d}, 0x14}}, 0x0) 04:13:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) 04:13:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000001", @ANYRES16=r2, @ANYBLOB="16002dbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r8) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r8) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r10, r7, r7, r7], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x0, 0x4, 0x1], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022dbd7000fbdbdf250200000008000a006e6264000c00080009000000000000000c000300000000000100000008000a006e6264000c00060002000000000000001c00078008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:13:08 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf25010000000c00078008000100", @ANYRES32, @ANYBLOB="0c00020003000000000000000c00050008000000000000000c000a002e2a245e242b792b0c000500020200000000000011000a004e4c424c5f43414c4950534f000000000c000200ffffffffffffffff0c0006000100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf25010000000c00078008000100", @ANYRES32, @ANYBLOB="0c00020003000000000000000c00050008000000000000000c000a002e2a245e242b792b0c000500020200000000000011000a004e4c424c5f43414c4950534f000000000c000200ffffffffffffffff0c0006000100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) 04:13:08 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 14) [ 2805.137016] FAULT_INJECTION: forcing a failure. [ 2805.137016] name failslab, interval 1, probability 0, space 0, times 0 [ 2805.155251] CPU: 0 PID: 22773 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2805.163146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2805.172495] Call Trace: [ 2805.175082] dump_stack+0x1b2/0x281 [ 2805.178715] should_fail.cold+0x10a/0x149 [ 2805.182862] should_failslab+0xd6/0x130 [ 2805.186836] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2805.191939] __kmalloc_node+0x38/0x70 [ 2805.195748] blk_mq_alloc_rq_map+0x113/0x220 [ 2805.200155] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 2805.204652] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2805.209149] nbd_dev_add+0x2ae/0x800 [ 2805.213034] ? nbd_send_cmd+0x11f0/0x11f0 [ 2805.217187] ? ns_capable_common+0x127/0x150 [ 2805.221590] nbd_genl_connect+0x3a4/0x13e0 [ 2805.225815] ? lock_acquire+0x170/0x3f0 [ 2805.229787] ? nbd_xmit_timeout+0x500/0x500 [ 2805.234301] ? validate_nla+0x192/0x5e0 [ 2805.238271] ? nla_parse+0x157/0x1f0 [ 2805.241983] genl_family_rcv_msg+0x572/0xb20 [ 2805.246387] ? genl_rcv+0x40/0x40 [ 2805.249837] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2805.255286] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2805.260382] ? trace_hardirqs_on+0x10/0x10 [ 2805.264613] genl_rcv_msg+0xaf/0x140 [ 2805.268324] netlink_rcv_skb+0x125/0x390 [ 2805.272380] ? genl_family_rcv_msg+0xb20/0xb20 [ 2805.276960] ? netlink_ack+0x9a0/0x9a0 [ 2805.280841] ? lock_acquire+0x170/0x3f0 [ 2805.284819] genl_rcv+0x24/0x40 [ 2805.288095] netlink_unicast+0x437/0x610 [ 2805.292152] ? netlink_sendskb+0xd0/0xd0 [ 2805.296211] ? __check_object_size+0x179/0x230 [ 2805.300795] netlink_sendmsg+0x648/0xbc0 [ 2805.304854] ? nlmsg_notify+0x1b0/0x1b0 [ 2805.308924] ? kernel_recvmsg+0x210/0x210 [ 2805.313075] ? security_socket_sendmsg+0x83/0xb0 [ 2805.317823] ? nlmsg_notify+0x1b0/0x1b0 [ 2805.321793] sock_sendmsg+0xb5/0x100 [ 2805.325512] ___sys_sendmsg+0x6c8/0x800 [ 2805.329480] ? get_pid_task+0x91/0x130 [ 2805.333361] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2805.338115] ? lock_downgrade+0x740/0x740 [ 2805.342266] ? __fget+0x23e/0x3e0 [ 2805.345720] ? lock_acquire+0x170/0x3f0 [ 2805.349695] ? lock_downgrade+0x740/0x740 [ 2805.353851] ? __fdget+0x19b/0x1f0 [ 2805.357390] ? sockfd_lookup_light+0xb2/0x160 [ 2805.361881] __sys_sendmsg+0xa3/0x120 [ 2805.365693] ? SyS_shutdown+0x160/0x160 [ 2805.369667] ? wait_for_completion_io+0x10/0x10 [ 2805.374348] ? SyS_read+0x210/0x210 [ 2805.378069] SyS_sendmsg+0x27/0x40 [ 2805.381606] ? __sys_sendmsg+0x120/0x120 [ 2805.385664] do_syscall_64+0x1d5/0x640 [ 2805.389565] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2805.394750] RIP: 0033:0x7f56575860a9 [ 2805.398452] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2805.406154] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2805.413418] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2805.420684] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2805.427951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2805.435216] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2805.473271] blk-mq: reduced tag depth (128 -> 64) [ 2805.485984] nla_parse: 7 callbacks suppressed [ 2805.485990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:13:09 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 15) 04:13:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000001", @ANYRES16=r2, @ANYBLOB="16002dbd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r8) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r8) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r10, r7, r7, r7], 0x1f, 0x5, 0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x0, 0x4, 0x1], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) (rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022dbd7000fbdbdf250200000008000a006e6264000c00080009000000000000000c000300000000000100000008000a006e6264000c00060002000000000000001c00078008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:13:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:13:09 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404a804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x100, 0x70bd2d}, 0x14}}, 0x0) 04:13:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1000, 0x8], 0x2, 0x800}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x2c010) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x34}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008084) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB="ff01297c", @ANYRES32, @ANYBLOB="325111df6008136322b32ff0eec7edd323348e286b5af9229d3740903bc7ce98bcb7f7e368bd5625a62393e7b6219f9de91f3a71aa4d460063957cd23031d4a3efa1b388b31106e98725a8e21d4670c8c8c1506bed8d0adc8bda61d3ed60f94a059b54a1a8ba449facf4ca0ea749a8dd75f26f17f1f54ed1c2000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="8e6c9222dab378cceb3116c8c87c71b1a7cd9b7db1a5a9782032f6952b79d789592d67001fec93a2637c527fbcea42bd1be648bb1cdd040cfe8e7cd87529f6ddd731519ff9703fcc368745e118ae2e4e6cf55b1ea49c186d1f7141ea89e52115d3c5de414471b28e97c378a86001e54542ba0dbbcf62d2cea536f9d4818afdb93e2e36eca2bd1642fe13264f80dc5304636af74c381e651476f7489e045dd73407932f8e81b74c6f7d3f5a39009f", @ANYBLOB="0c0002"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2805.563205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2805.602599] nbd: must specify a size in bytes for the device [ 2805.642916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x61, r1, 0x200}, 0x14}}, 0x0) 04:13:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="00000000000000000000b86113807348a636320745ddfb0b0000000078e832f13244a08198fd2fc13f6372f57610628e81a336af280942d3fc30f75a76f93679"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 04:13:09 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404a804) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2805.699673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 04:13:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x61, r1, 0x200}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x61, r1, 0x200}, 0x14}}, 0x0) (async) 04:13:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1000, 0x8], 0x2, 0x800}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x2c010) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x34}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008084) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB="ff01297c", @ANYRES32, @ANYBLOB="325111df6008136322b32ff0eec7edd323348e286b5af9229d3740903bc7ce98bcb7f7e368bd5625a62393e7b6219f9de91f3a71aa4d460063957cd23031d4a3efa1b388b31106e98725a8e21d4670c8c8c1506bed8d0adc8bda61d3ed60f94a059b54a1a8ba449facf4ca0ea749a8dd75f26f17f1f54ed1c2000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="8e6c9222dab378cceb3116c8c87c71b1a7cd9b7db1a5a9782032f6952b79d789592d67001fec93a2637c527fbcea42bd1be648bb1cdd040cfe8e7cd87529f6ddd731519ff9703fcc368745e118ae2e4e6cf55b1ea49c186d1f7141ea89e52115d3c5de414471b28e97c378a86001e54542ba0dbbcf62d2cea536f9d4818afdb93e2e36eca2bd1642fe13264f80dc5304636af74c381e651476f7489e045dd73407932f8e81b74c6f7d3f5a39009f", @ANYBLOB="0c0002"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2805.741201] nbd: must specify a size in bytes for the device [ 2805.760380] FAULT_INJECTION: forcing a failure. [ 2805.760380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2805.819251] CPU: 0 PID: 22839 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2805.827159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2805.836511] Call Trace: [ 2805.839110] dump_stack+0x1b2/0x281 [ 2805.842748] should_fail.cold+0x10a/0x149 [ 2805.846906] __alloc_pages_nodemask+0x21e/0x2900 [ 2805.852535] ? __kmalloc_node+0x4c/0x70 [ 2805.856517] ? blk_mq_alloc_rq_map+0x113/0x220 [ 2805.861106] ? blk_mq_alloc_tag_set+0x4ac/0x910 [ 2805.865772] ? nbd_dev_add+0x2ae/0x800 [ 2805.869668] ? nbd_genl_connect+0x3a4/0x13e0 [ 2805.874079] ? netlink_rcv_skb+0x125/0x390 [ 2805.878310] ? genl_rcv+0x24/0x40 [ 2805.881756] ? netlink_unicast+0x437/0x610 [ 2805.885986] ? sock_sendmsg+0xb5/0x100 [ 2805.889868] ? ___sys_sendmsg+0x6c8/0x800 [ 2805.894016] ? __sys_sendmsg+0xa3/0x120 [ 2805.897986] ? SyS_sendmsg+0x27/0x40 [ 2805.901699] ? do_syscall_64+0x1d5/0x640 [ 2805.905765] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2805.911125] ? fs_reclaim_release+0xd0/0x110 [ 2805.915541] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2805.920395] ? __lockdep_init_map+0x100/0x560 [ 2805.924981] ? _find_next_bit+0xdb/0x100 [ 2805.929045] ? __cpu_to_node+0x7b/0xa0 [ 2805.932930] ? blk_mq_hw_queue_to_node+0x9f/0xf0 [ 2805.937689] blk_mq_alloc_rqs+0x227/0x6d0 [ 2805.942635] ? blk_mq_alloc_rq_map+0x9d/0x220 [ 2805.947134] __blk_mq_alloc_rq_map+0x15b/0x3a0 [ 2805.951718] blk_mq_alloc_tag_set+0x4ac/0x910 [ 2805.956222] nbd_dev_add+0x2ae/0x800 [ 2805.959936] ? nbd_send_cmd+0x11f0/0x11f0 [ 2805.964088] ? ns_capable_common+0x127/0x150 [ 2805.968495] nbd_genl_connect+0x3a4/0x13e0 [ 2805.972735] ? lock_acquire+0x170/0x3f0 [ 2805.976709] ? nbd_xmit_timeout+0x500/0x500 [ 2805.981034] ? validate_nla+0x192/0x5e0 [ 2805.985007] ? nla_parse+0x157/0x1f0 [ 2805.988733] genl_family_rcv_msg+0x572/0xb20 [ 2805.993145] ? genl_rcv+0x40/0x40 [ 2805.996599] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2806.002046] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2806.007145] ? trace_hardirqs_on+0x10/0x10 [ 2806.011387] genl_rcv_msg+0xaf/0x140 [ 2806.015101] netlink_rcv_skb+0x125/0x390 [ 2806.019159] ? genl_family_rcv_msg+0xb20/0xb20 [ 2806.023747] ? netlink_ack+0x9a0/0x9a0 [ 2806.027636] ? lock_acquire+0x170/0x3f0 [ 2806.031610] genl_rcv+0x24/0x40 [ 2806.034889] netlink_unicast+0x437/0x610 [ 2806.038953] ? netlink_sendskb+0xd0/0xd0 [ 2806.043011] ? __check_object_size+0x179/0x230 [ 2806.047589] netlink_sendmsg+0x648/0xbc0 [ 2806.051651] ? nlmsg_notify+0x1b0/0x1b0 [ 2806.055623] ? kernel_recvmsg+0x210/0x210 [ 2806.059770] ? security_socket_sendmsg+0x83/0xb0 [ 2806.064526] ? nlmsg_notify+0x1b0/0x1b0 [ 2806.068497] sock_sendmsg+0xb5/0x100 [ 2806.072212] ___sys_sendmsg+0x6c8/0x800 [ 2806.076183] ? get_pid_task+0x91/0x130 [ 2806.080069] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2806.084920] ? lock_downgrade+0x740/0x740 [ 2806.089069] ? __fget+0x23e/0x3e0 [ 2806.092529] ? lock_acquire+0x170/0x3f0 [ 2806.096509] ? lock_downgrade+0x740/0x740 [ 2806.100670] ? __fdget+0x19b/0x1f0 [ 2806.104212] ? sockfd_lookup_light+0xb2/0x160 [ 2806.108712] __sys_sendmsg+0xa3/0x120 [ 2806.112518] ? SyS_shutdown+0x160/0x160 [ 2806.116493] ? wait_for_completion_io+0x10/0x10 [ 2806.121164] ? SyS_read+0x210/0x210 [ 2806.124792] SyS_sendmsg+0x27/0x40 [ 2806.128330] ? __sys_sendmsg+0x120/0x120 [ 2806.132387] do_syscall_64+0x1d5/0x640 [ 2806.136277] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2806.141464] RIP: 0033:0x7f56575860a9 [ 2806.145166] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2806.152867] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2806.160130] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2806.167395] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2806.174659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2806.181926] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2806.231479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:13:09 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 16) 04:13:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xe200, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="c7cc1c428b214c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="a93b8ad1ef0f261584582566065b1e27e3b7e2dc39014cf8ba568fb9603a3e897246df0f781d1ec987aabc10c2fd4aada141", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x44000) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r9) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r10, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40c0) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r10, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '$[-\\.'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x54) 04:13:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES8=r1, @ANYBLOB="01"], 0x14}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200981, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 04:13:09 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404a804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404a804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) 04:13:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x61, r1, 0x200}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x61, r1, 0x200}, 0x14}}, 0x0) (async) 04:13:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="00000000000000000000b86113807348a636320745ddfb0b0000000078e832f13244a08198fd2fc13f6372f57610628e81a336af280942d3fc30f75a76f93679"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 04:13:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xe200, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="c7cc1c428b214c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="a93b8ad1ef0f261584582566065b1e27e3b7e2dc39014cf8ba568fb9603a3e897246df0f781d1ec987aabc10c2fd4aada141", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x44000) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r9) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r10, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40c0) (async) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r10, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '$[-\\.'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x54) [ 2806.337478] nbd: couldn't find a device at index 4 [ 2806.381389] FAULT_INJECTION: forcing a failure. [ 2806.381389] name failslab, interval 1, probability 0, space 0, times 0 [ 2806.411664] CPU: 0 PID: 22896 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2806.419574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2806.428926] Call Trace: [ 2806.431514] dump_stack+0x1b2/0x281 [ 2806.435145] should_fail.cold+0x10a/0x149 [ 2806.439295] should_failslab+0xd6/0x130 [ 2806.443270] kmem_cache_alloc_node+0x263/0x410 [ 2806.447855] blk_alloc_queue_node+0x2d/0xb40 [ 2806.452265] blk_mq_init_queue+0x42/0x90 [ 2806.456324] nbd_dev_add+0x2c6/0x800 [ 2806.460035] ? nbd_send_cmd+0x11f0/0x11f0 [ 2806.464185] ? ns_capable_common+0x127/0x150 [ 2806.468599] nbd_genl_connect+0x3a4/0x13e0 [ 2806.472830] ? lock_acquire+0x170/0x3f0 [ 2806.476803] ? nbd_xmit_timeout+0x500/0x500 [ 2806.481121] ? validate_nla+0x192/0x5e0 [ 2806.485088] ? nla_parse+0x157/0x1f0 [ 2806.488798] genl_family_rcv_msg+0x572/0xb20 [ 2806.493203] ? genl_rcv+0x40/0x40 [ 2806.496659] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2806.502107] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2806.507206] ? trace_hardirqs_on+0x10/0x10 [ 2806.511442] genl_rcv_msg+0xaf/0x140 [ 2806.515152] netlink_rcv_skb+0x125/0x390 [ 2806.519212] ? genl_family_rcv_msg+0xb20/0xb20 [ 2806.523792] ? netlink_ack+0x9a0/0x9a0 [ 2806.527678] ? lock_acquire+0x170/0x3f0 [ 2806.531656] genl_rcv+0x24/0x40 [ 2806.534932] netlink_unicast+0x437/0x610 [ 2806.538996] ? netlink_sendskb+0xd0/0xd0 [ 2806.543057] ? __check_object_size+0x179/0x230 [ 2806.547644] netlink_sendmsg+0x648/0xbc0 [ 2806.551713] ? nlmsg_notify+0x1b0/0x1b0 [ 2806.555687] ? kernel_recvmsg+0x210/0x210 [ 2806.559834] ? security_socket_sendmsg+0x83/0xb0 [ 2806.564596] ? nlmsg_notify+0x1b0/0x1b0 [ 2806.568576] sock_sendmsg+0xb5/0x100 [ 2806.572293] ___sys_sendmsg+0x6c8/0x800 [ 2806.576266] ? get_pid_task+0x91/0x130 [ 2806.580155] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2806.584911] ? lock_downgrade+0x740/0x740 [ 2806.589066] ? __fget+0x23e/0x3e0 [ 2806.592521] ? lock_acquire+0x170/0x3f0 [ 2806.596504] ? lock_downgrade+0x740/0x740 [ 2806.600660] ? __fdget+0x19b/0x1f0 [ 2806.604199] ? sockfd_lookup_light+0xb2/0x160 [ 2806.608694] __sys_sendmsg+0xa3/0x120 [ 2806.612595] ? SyS_shutdown+0x160/0x160 [ 2806.616577] ? wait_for_completion_io+0x10/0x10 [ 2806.621246] ? SyS_read+0x210/0x210 [ 2806.624880] SyS_sendmsg+0x27/0x40 [ 2806.628415] ? __sys_sendmsg+0x120/0x120 [ 2806.632474] do_syscall_64+0x1d5/0x640 [ 2806.636366] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2806.641554] RIP: 0033:0x7f56575860a9 [ 2806.645257] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2806.652960] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2806.660226] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2806.667492] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2806.674761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 04:13:10 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="00000000000000000000b86113807348a636320745ddfb0b0000000078e832f13244a08198fd2fc13f6372f57610628e81a336af280942d3fc30f75a76f93679"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="00000000000000000000b86113807348a636320745ddfb0b0000000078e832f13244a08198fd2fc13f6372f57610628e81a336af280942d3fc30f75a76f93679"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) [ 2806.682026] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2806.715301] nbd: failed to add new device 04:13:10 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 17) 04:13:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8e00000071566714241b057b111fde5cb7863fce40ad4e3a07aed68b2cf385265aa4d6a83a9726ab07760155a6e5adea507eee3ce6484e2804ec126e841ba91eb639387baa089e2905fc07e00b554cc4a75d7dfe4b83d3999a2265e0549c2b36a7be5a382ebfa7b3976b63e70da5bba108", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) 04:13:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES8=r1, @ANYBLOB="01"], 0x14}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200981, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES8=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200981, 0x0) (async) ioctl$SNAPSHOT_FREE(r2, 0x3305) (async) 04:13:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xe200, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="c7cc1c428b214c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="a93b8ad1ef0f261584582566065b1e27e3b7e2dc39014cf8ba568fb9603a3e897246df0f781d1ec987aabc10c2fd4aada141", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x44000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r2) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r9) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r10, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40c0) (async) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r10, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '$[-\\.'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x54) [ 2806.741250] nbd: couldn't find a device at index 4 [ 2806.805216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:10 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r4) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8e00000071566714241b057b111fde5cb7863fce40ad4e3a07aed68b2cf385265aa4d6a83a9726ab07760155a6e5adea507eee3ce6484e2804ec126e841ba91eb639387baa089e2905fc07e00b554cc4a75d7dfe4b83d3999a2265e0549c2b36a7be5a382ebfa7b3976b63e70da5bba108", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) [ 2806.881633] FAULT_INJECTION: forcing a failure. [ 2806.881633] name failslab, interval 1, probability 0, space 0, times 0 [ 2806.911515] CPU: 0 PID: 22946 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2806.919429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2806.928783] Call Trace: [ 2806.931376] dump_stack+0x1b2/0x281 [ 2806.935012] should_fail.cold+0x10a/0x149 [ 2806.939169] should_failslab+0xd6/0x130 [ 2806.943252] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2806.947934] bioset_create+0x53/0x750 [ 2806.951739] ? kmem_cache_alloc_node+0x38b/0x410 [ 2806.956497] blk_alloc_queue_node+0xa8/0xb40 [ 2806.960914] blk_mq_init_queue+0x42/0x90 [ 2806.964975] nbd_dev_add+0x2c6/0x800 [ 2806.968688] ? nbd_send_cmd+0x11f0/0x11f0 [ 2806.972834] ? ns_capable_common+0x127/0x150 [ 2806.977246] nbd_genl_connect+0x3a4/0x13e0 [ 2806.981479] ? lock_acquire+0x170/0x3f0 [ 2806.985453] ? nbd_xmit_timeout+0x500/0x500 [ 2806.989774] ? validate_nla+0x192/0x5e0 [ 2806.993745] ? nla_parse+0x157/0x1f0 [ 2806.997460] genl_family_rcv_msg+0x572/0xb20 [ 2807.001875] ? genl_rcv+0x40/0x40 [ 2807.005329] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2807.010774] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2807.015870] ? trace_hardirqs_on+0x10/0x10 [ 2807.020108] genl_rcv_msg+0xaf/0x140 [ 2807.023818] netlink_rcv_skb+0x125/0x390 [ 2807.027878] ? genl_family_rcv_msg+0xb20/0xb20 [ 2807.032458] ? netlink_ack+0x9a0/0x9a0 [ 2807.036341] ? lock_acquire+0x170/0x3f0 [ 2807.040314] genl_rcv+0x24/0x40 [ 2807.043587] netlink_unicast+0x437/0x610 [ 2807.047648] ? netlink_sendskb+0xd0/0xd0 [ 2807.051708] ? __check_object_size+0x179/0x230 [ 2807.056284] netlink_sendmsg+0x648/0xbc0 [ 2807.060353] ? nlmsg_notify+0x1b0/0x1b0 [ 2807.064323] ? kernel_recvmsg+0x210/0x210 [ 2807.068467] ? security_socket_sendmsg+0x83/0xb0 [ 2807.073219] ? nlmsg_notify+0x1b0/0x1b0 [ 2807.077188] sock_sendmsg+0xb5/0x100 [ 2807.080897] ___sys_sendmsg+0x6c8/0x800 [ 2807.084863] ? get_pid_task+0x91/0x130 [ 2807.088745] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2807.093501] ? lock_downgrade+0x740/0x740 [ 2807.097647] ? __fget+0x23e/0x3e0 [ 2807.101097] ? lock_acquire+0x170/0x3f0 [ 2807.105065] ? lock_downgrade+0x740/0x740 [ 2807.109214] ? __fdget+0x19b/0x1f0 [ 2807.112747] ? sockfd_lookup_light+0xb2/0x160 [ 2807.117235] __sys_sendmsg+0xa3/0x120 [ 2807.121039] ? SyS_shutdown+0x160/0x160 [ 2807.125009] ? wait_for_completion_io+0x10/0x10 [ 2807.129684] ? SyS_read+0x210/0x210 [ 2807.133305] SyS_sendmsg+0x27/0x40 [ 2807.136840] ? __sys_sendmsg+0x120/0x120 [ 2807.140894] do_syscall_64+0x1d5/0x640 [ 2807.144900] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2807.150082] RIP: 0033:0x7f56575860a9 [ 2807.153784] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2807.161490] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2807.168754] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2807.176024] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.183294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.190563] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x30b}, 0x14}}, 0x0) 04:13:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8e00000071566714241b057b111fde5cb7863fce40ad4e3a07aed68b2cf385265aa4d6a83a9726ab07760155a6e5adea507eee3ce6484e2804ec126e841ba91eb639387baa089e2905fc07e00b554cc4a75d7dfe4b83d3999a2265e0549c2b36a7be5a382ebfa7b3976b63e70da5bba108", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) 04:13:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES8=r1, @ANYBLOB="01"], 0x14}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200981, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES8=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200981, 0x0) (async) ioctl$SNAPSHOT_FREE(r2, 0x3305) (async) 04:13:10 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async, rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (rerun: 64) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r4) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2807.226633] nbd: failed to add new device [ 2807.232902] nbd: couldn't find a device at index 4 04:13:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000d0cf00002c0007c008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'u:r:untrusted_app:s0:c512,c768\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80000}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r6) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xaf}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffbe6}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x482, 0x0) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "6319b2fa3b14438e", "2333b7c0a89d442cc89c9ffe66ba60f7", "50fe42df", "c011d21e52b402ee"}, 0x28) 04:13:10 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 18) 04:13:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa0, 0x0, 0x700, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:13:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000280)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="12000000", @ANYRES16=r2, @ANYBLOB="01f768df0a127fa48996e650a0ee23c7f23bb21641215a9584522f"], 0x14}}, 0x0) 04:13:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x30b}, 0x14}}, 0x0) 04:13:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000d0cf00002c0007c008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'u:r:untrusted_app:s0:c512,c768\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80000}, 0x40) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r6) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xaf}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffbe6}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x482, 0x0) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "6319b2fa3b14438e", "2333b7c0a89d442cc89c9ffe66ba60f7", "50fe42df", "c011d21e52b402ee"}, 0x28) [ 2807.347057] FAULT_INJECTION: forcing a failure. [ 2807.347057] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.386551] CPU: 0 PID: 23010 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2807.394462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2807.403814] Call Trace: [ 2807.406399] dump_stack+0x1b2/0x281 [ 2807.410032] should_fail.cold+0x10a/0x149 [ 2807.414185] should_failslab+0xd6/0x130 [ 2807.418159] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2807.423258] ? mempool_free+0x1d0/0x1d0 [ 2807.427231] mempool_create_node+0x76/0x3e0 [ 2807.431562] ? mempool_kmalloc+0x20/0x20 [ 2807.435621] bioset_create+0x31b/0x750 [ 2807.439509] ? kmem_cache_alloc_node+0x38b/0x410 [ 2807.444262] blk_alloc_queue_node+0xa8/0xb40 [ 2807.448670] blk_mq_init_queue+0x42/0x90 [ 2807.452726] nbd_dev_add+0x2c6/0x800 [ 2807.456433] ? nbd_send_cmd+0x11f0/0x11f0 [ 2807.460577] ? ns_capable_common+0x127/0x150 [ 2807.464986] nbd_genl_connect+0x3a4/0x13e0 [ 2807.469223] ? lock_acquire+0x170/0x3f0 [ 2807.473196] ? nbd_xmit_timeout+0x500/0x500 [ 2807.477514] ? validate_nla+0x192/0x5e0 [ 2807.481486] ? nla_parse+0x157/0x1f0 [ 2807.485195] genl_family_rcv_msg+0x572/0xb20 [ 2807.489611] ? genl_rcv+0x40/0x40 [ 2807.493060] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2807.498510] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2807.503612] ? trace_hardirqs_on+0x10/0x10 [ 2807.507846] genl_rcv_msg+0xaf/0x140 [ 2807.511561] netlink_rcv_skb+0x125/0x390 [ 2807.515611] ? genl_family_rcv_msg+0xb20/0xb20 [ 2807.520187] ? netlink_ack+0x9a0/0x9a0 [ 2807.524071] ? lock_acquire+0x170/0x3f0 [ 2807.528044] genl_rcv+0x24/0x40 [ 2807.531320] netlink_unicast+0x437/0x610 [ 2807.535380] ? netlink_sendskb+0xd0/0xd0 [ 2807.539434] ? __check_object_size+0x179/0x230 [ 2807.544015] netlink_sendmsg+0x648/0xbc0 [ 2807.548076] ? nlmsg_notify+0x1b0/0x1b0 [ 2807.552045] ? kernel_recvmsg+0x210/0x210 [ 2807.556185] ? security_socket_sendmsg+0x83/0xb0 [ 2807.560931] ? nlmsg_notify+0x1b0/0x1b0 [ 2807.564900] sock_sendmsg+0xb5/0x100 [ 2807.568608] ___sys_sendmsg+0x6c8/0x800 [ 2807.572578] ? get_pid_task+0x91/0x130 [ 2807.576465] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2807.581220] ? lock_downgrade+0x740/0x740 [ 2807.585375] ? __fget+0x23e/0x3e0 [ 2807.588823] ? lock_acquire+0x170/0x3f0 [ 2807.592795] ? lock_downgrade+0x740/0x740 [ 2807.596954] ? __fdget+0x19b/0x1f0 [ 2807.600499] ? sockfd_lookup_light+0xb2/0x160 [ 2807.604997] __sys_sendmsg+0xa3/0x120 [ 2807.608794] ? SyS_shutdown+0x160/0x160 [ 2807.612764] ? wait_for_completion_io+0x10/0x10 [ 2807.617432] ? SyS_read+0x210/0x210 [ 2807.621054] SyS_sendmsg+0x27/0x40 [ 2807.624583] ? __sys_sendmsg+0x120/0x120 [ 2807.628639] do_syscall_64+0x1d5/0x640 [ 2807.632531] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2807.637713] RIP: 0033:0x7f56575860a9 [ 2807.641413] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2807.649121] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2807.656387] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2807.663652] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.670919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.678187] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000280)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="12000000", @ANYRES16=r2, @ANYBLOB="01f768df0a127fa48996e650a0ee23c7f23bb21641215a9584522f"], 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000280)) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="12000000", @ANYRES16=r2, @ANYBLOB="01f768df0a127fa48996e650a0ee23c7f23bb21641215a9584522f"], 0x14}}, 0x0) (async) [ 2807.715020] nbd: failed to add new device 04:13:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa0, 0x0, 0x700, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa0, 0x0, 0x700, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) 04:13:11 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 19) [ 2807.741841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:11 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r4, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r7) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf25010000000c00078008000100", @ANYRES32, @ANYBLOB="0c00020003000000000000000c00050008000000000000000c000a002e2a245e242b792b0c008ea97a8051cf430500020200000000004c4950534f000000000c000200ffffffffffffffff0c00060001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000d0cf00002c0007c008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'u:r:untrusted_app:s0:c512,c768\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80000}, 0x40) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r6) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xaf}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffbe6}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x482, 0x0) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "6319b2fa3b14438e", "2333b7c0a89d442cc89c9ffe66ba60f7", "50fe42df", "c011d21e52b402ee"}, 0x28) 04:13:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) (async, rerun: 32) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x30b}, 0x14}}, 0x0) [ 2807.829222] FAULT_INJECTION: forcing a failure. [ 2807.829222] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.841448] CPU: 1 PID: 23048 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2807.849340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2807.858701] Call Trace: [ 2807.861293] dump_stack+0x1b2/0x281 [ 2807.864925] should_fail.cold+0x10a/0x149 [ 2807.869074] should_failslab+0xd6/0x130 [ 2807.873055] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2807.878154] ? mempool_free+0x1d0/0x1d0 [ 2807.882132] __kmalloc_node+0x38/0x70 [ 2807.885938] mempool_create_node+0xb1/0x3e0 [ 2807.890267] ? mempool_kmalloc+0x20/0x20 [ 2807.894431] bioset_create+0x31b/0x750 [ 2807.898316] ? kmem_cache_alloc_node+0x38b/0x410 [ 2807.903073] blk_alloc_queue_node+0xa8/0xb40 [ 2807.907487] blk_mq_init_queue+0x42/0x90 [ 2807.911549] nbd_dev_add+0x2c6/0x800 [ 2807.915256] ? nbd_send_cmd+0x11f0/0x11f0 [ 2807.919396] ? ns_capable_common+0x127/0x150 [ 2807.923809] nbd_genl_connect+0x3a4/0x13e0 [ 2807.928149] ? lock_acquire+0x170/0x3f0 [ 2807.932123] ? nbd_xmit_timeout+0x500/0x500 [ 2807.936453] ? validate_nla+0x192/0x5e0 [ 2807.940428] ? nla_parse+0x157/0x1f0 [ 2807.944148] genl_family_rcv_msg+0x572/0xb20 [ 2807.948556] ? genl_rcv+0x40/0x40 [ 2807.952009] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2807.957459] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2807.962565] ? trace_hardirqs_on+0x10/0x10 [ 2807.966808] genl_rcv_msg+0xaf/0x140 [ 2807.970516] netlink_rcv_skb+0x125/0x390 [ 2807.974572] ? genl_family_rcv_msg+0xb20/0xb20 [ 2807.979149] ? netlink_ack+0x9a0/0x9a0 [ 2807.983031] ? lock_acquire+0x170/0x3f0 [ 2807.987002] genl_rcv+0x24/0x40 [ 2807.990271] netlink_unicast+0x437/0x610 [ 2807.994330] ? netlink_sendskb+0xd0/0xd0 [ 2807.998388] ? __check_object_size+0x179/0x230 [ 2808.002970] netlink_sendmsg+0x648/0xbc0 [ 2808.007059] ? nlmsg_notify+0x1b0/0x1b0 [ 2808.011028] ? kernel_recvmsg+0x210/0x210 [ 2808.015173] ? security_socket_sendmsg+0x83/0xb0 [ 2808.019926] ? nlmsg_notify+0x1b0/0x1b0 [ 2808.023897] sock_sendmsg+0xb5/0x100 [ 2808.027620] ___sys_sendmsg+0x6c8/0x800 [ 2808.031592] ? get_pid_task+0x91/0x130 [ 2808.035472] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2808.040225] ? lock_downgrade+0x740/0x740 [ 2808.044367] ? __fget+0x23e/0x3e0 [ 2808.047816] ? lock_acquire+0x170/0x3f0 [ 2808.051785] ? lock_downgrade+0x740/0x740 [ 2808.055932] ? __fdget+0x19b/0x1f0 [ 2808.059474] ? sockfd_lookup_light+0xb2/0x160 [ 2808.063972] __sys_sendmsg+0xa3/0x120 [ 2808.067775] ? SyS_shutdown+0x160/0x160 [ 2808.071742] ? wait_for_completion_io+0x10/0x10 [ 2808.076409] ? SyS_read+0x210/0x210 [ 2808.080028] SyS_sendmsg+0x27/0x40 [ 2808.083560] ? __sys_sendmsg+0x120/0x120 [ 2808.087614] do_syscall_64+0x1d5/0x640 [ 2808.091503] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2808.096682] RIP: 0033:0x7f56575860a9 [ 2808.100380] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2808.108084] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2808.115350] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2808.122615] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 04:13:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000280)) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="12000000", @ANYRES16=r2, @ANYBLOB="01f768df0a127fa48996e650a0ee23c7f23bb21641215a9584522f"], 0x14}}, 0x0) [ 2808.129883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2808.137158] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2808.166391] nbd: failed to add new device 04:13:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}}, 0x20044040) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x30b}, 0x14}}, 0x0) 04:13:11 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 20) 04:13:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa0, 0x0, 0x700, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa0, 0x0, 0x700, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) 04:13:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800021}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4) [ 2808.241215] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r2, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4800) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="12000000", @ANYRES16=r3, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 04:13:11 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r4, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) (async, rerun: 32) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r7) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf25010000000c00078008000100", @ANYRES32, @ANYBLOB="0c00020003000000000000000c00050008000000000000000c000a002e2a245e242b792b0c008ea97a8051cf430500020200000000004c4950534f000000000c000200ffffffffffffffff0c00060001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2808.284153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2808.297677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2808.324834] FAULT_INJECTION: forcing a failure. [ 2808.324834] name failslab, interval 1, probability 0, space 0, times 0 [ 2808.337452] CPU: 0 PID: 23082 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2808.345378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2808.354729] Call Trace: [ 2808.357405] dump_stack+0x1b2/0x281 [ 2808.361035] should_fail.cold+0x10a/0x149 [ 2808.365188] should_failslab+0xd6/0x130 [ 2808.369168] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2808.374269] __kmalloc_node_track_caller+0x38/0x70 [ 2808.379189] __alloc_skb+0x96/0x510 [ 2808.382805] kobject_uevent_env+0x882/0xf30 [ 2808.387107] nbd_config_put+0x50a/0x6c0 [ 2808.391064] ? wait_for_completion_io+0x10/0x10 [ 2808.395726] nbd_genl_connect+0xcb9/0x13e0 [ 2808.399972] ? nbd_xmit_timeout+0x500/0x500 [ 2808.404273] ? validate_nla+0x192/0x5e0 [ 2808.408226] genl_family_rcv_msg+0x572/0xb20 [ 2808.412613] ? genl_rcv+0x40/0x40 [ 2808.416053] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2808.421507] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2808.426598] ? trace_hardirqs_on+0x10/0x10 [ 2808.430814] genl_rcv_msg+0xaf/0x140 [ 2808.434506] netlink_rcv_skb+0x125/0x390 [ 2808.438543] ? genl_family_rcv_msg+0xb20/0xb20 [ 2808.443188] ? netlink_ack+0x9a0/0x9a0 [ 2808.447061] ? lock_acquire+0x170/0x3f0 [ 2808.451012] genl_rcv+0x24/0x40 [ 2808.454268] netlink_unicast+0x437/0x610 [ 2808.458304] ? netlink_sendskb+0xd0/0xd0 [ 2808.462347] ? __check_object_size+0x179/0x230 [ 2808.466933] netlink_sendmsg+0x648/0xbc0 [ 2808.470984] ? nlmsg_notify+0x1b0/0x1b0 [ 2808.474942] ? kernel_recvmsg+0x210/0x210 [ 2808.479090] ? security_socket_sendmsg+0x83/0xb0 [ 2808.483835] ? nlmsg_notify+0x1b0/0x1b0 [ 2808.487785] sock_sendmsg+0xb5/0x100 [ 2808.491484] ___sys_sendmsg+0x6c8/0x800 [ 2808.495443] ? get_pid_task+0x91/0x130 [ 2808.499306] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2808.504039] ? lock_downgrade+0x740/0x740 [ 2808.508168] ? __fget+0x23e/0x3e0 [ 2808.511601] ? lock_acquire+0x170/0x3f0 [ 2808.515552] ? lock_downgrade+0x740/0x740 [ 2808.519678] ? __fdget+0x19b/0x1f0 [ 2808.523195] ? sockfd_lookup_light+0xb2/0x160 [ 2808.527669] __sys_sendmsg+0xa3/0x120 [ 2808.531707] ? SyS_shutdown+0x160/0x160 [ 2808.535657] ? wait_for_completion_io+0x10/0x10 [ 2808.540308] ? SyS_read+0x210/0x210 [ 2808.543912] SyS_sendmsg+0x27/0x40 [ 2808.547432] ? __sys_sendmsg+0x120/0x120 [ 2808.551490] do_syscall_64+0x1d5/0x640 [ 2808.555358] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2808.560520] RIP: 0033:0x7f56575860a9 [ 2808.564205] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 04:13:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}}, 0x20044040) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x30b}, 0x14}}, 0x0) [ 2808.571886] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2808.579130] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2808.586377] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2808.593624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2808.600870] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:12 executing program 5: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000280)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x60, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000003c0)={0x5, 0x6, 0x1, 0x9, 0x0, 0x7fff, 0x4}) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000400)="f44aa220759a0bece45fb70d9ad513b2e5f2f2a315be9db5f2cf76096cb6c593be9d98b593d8dae5ef0a7c9e7abc305c121a0c438fbe491c6538b29650e121c3b6a4a1493600e702dbda9636f1f7be2169b9996bc07288754fa99023009eee01d7b55647ec59f8a55e613d028b3cbf891a13e8ac2bf4037893bd61710877dcd7a2748f3b908fe28dc720c01cb4e5928fb43a1481d33af3", 0x97}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x801) 04:13:12 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 21) 04:13:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}}, 0x20044040) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x30b}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}}, 0x20044040) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x30b}, 0x14}}, 0x0) (async) 04:13:12 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r4, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) (rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r7) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf25010000000c00078008000100", @ANYRES32, @ANYBLOB="0c00020003000000000000000c00050008000000000000000c000a002e2a245e242b792b0c008ea97a8051cf430500020200000000004c4950534f000000000c000200ffffffffffffffff0c00060001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800021}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 04:13:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r2, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4800) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="12000000", @ANYRES16=r3, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 04:13:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) [ 2808.730887] FAULT_INJECTION: forcing a failure. [ 2808.730887] name failslab, interval 1, probability 0, space 0, times 0 [ 2808.771658] CPU: 0 PID: 23123 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2808.779570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2808.788923] Call Trace: [ 2808.791516] dump_stack+0x1b2/0x281 [ 2808.795144] should_fail.cold+0x10a/0x149 [ 2808.799297] should_failslab+0xd6/0x130 [ 2808.803274] kmem_cache_alloc+0x28e/0x3c0 [ 2808.807506] ? mempool_free+0x1d0/0x1d0 [ 2808.811483] mempool_create_node+0x2d2/0x3e0 [ 2808.815893] bioset_create+0x31b/0x750 [ 2808.819779] ? kmem_cache_alloc_node+0x38b/0x410 [ 2808.824536] blk_alloc_queue_node+0xa8/0xb40 [ 2808.828941] blk_mq_init_queue+0x42/0x90 [ 2808.833001] nbd_dev_add+0x2c6/0x800 [ 2808.836709] ? nbd_send_cmd+0x11f0/0x11f0 [ 2808.840874] ? ns_capable_common+0x127/0x150 [ 2808.845280] nbd_genl_connect+0x3a4/0x13e0 [ 2808.849514] ? lock_acquire+0x170/0x3f0 [ 2808.853835] ? nbd_xmit_timeout+0x500/0x500 [ 2808.858160] ? validate_nla+0x192/0x5e0 [ 2808.862131] ? nla_parse+0x157/0x1f0 [ 2808.865843] genl_family_rcv_msg+0x572/0xb20 [ 2808.870256] ? genl_rcv+0x40/0x40 [ 2808.873707] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2808.879160] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2808.884268] ? trace_hardirqs_on+0x10/0x10 [ 2808.888509] genl_rcv_msg+0xaf/0x140 [ 2808.892221] netlink_rcv_skb+0x125/0x390 [ 2808.896281] ? genl_family_rcv_msg+0xb20/0xb20 [ 2808.900869] ? netlink_ack+0x9a0/0x9a0 [ 2808.904755] ? lock_acquire+0x170/0x3f0 [ 2808.908840] genl_rcv+0x24/0x40 [ 2808.912121] netlink_unicast+0x437/0x610 [ 2808.916175] ? netlink_sendskb+0xd0/0xd0 [ 2808.920227] ? __check_object_size+0x179/0x230 [ 2808.924808] netlink_sendmsg+0x648/0xbc0 [ 2808.928875] ? nlmsg_notify+0x1b0/0x1b0 [ 2808.932854] ? kernel_recvmsg+0x210/0x210 [ 2808.937003] ? security_socket_sendmsg+0x83/0xb0 [ 2808.941754] ? nlmsg_notify+0x1b0/0x1b0 [ 2808.945726] sock_sendmsg+0xb5/0x100 [ 2808.949437] ___sys_sendmsg+0x6c8/0x800 [ 2808.953408] ? get_pid_task+0x91/0x130 [ 2808.957289] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2808.962042] ? lock_downgrade+0x740/0x740 [ 2808.966185] ? __fget+0x23e/0x3e0 [ 2808.969633] ? lock_acquire+0x170/0x3f0 [ 2808.973600] ? lock_downgrade+0x740/0x740 [ 2808.977755] ? __fdget+0x19b/0x1f0 [ 2808.981297] ? sockfd_lookup_light+0xb2/0x160 [ 2808.985791] __sys_sendmsg+0xa3/0x120 [ 2808.989595] ? SyS_shutdown+0x160/0x160 [ 2808.993568] ? wait_for_completion_io+0x10/0x10 [ 2808.998244] ? SyS_read+0x210/0x210 [ 2809.001870] SyS_sendmsg+0x27/0x40 [ 2809.005405] ? __sys_sendmsg+0x120/0x120 [ 2809.009473] do_syscall_64+0x1d5/0x640 [ 2809.013371] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2809.018555] RIP: 0033:0x7f56575860a9 [ 2809.022256] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2809.029958] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2809.037221] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2809.044487] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2809.051754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2809.059017] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:12 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 22) [ 2809.091210] nbd: failed to add new device 04:13:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r2, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4800) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="12000000", @ANYRES16=r3, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) (async) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r2, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4800) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="12000000", @ANYRES16=r3, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) (async) 04:13:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800021}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 04:13:12 executing program 5: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000280)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x60, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000003c0)={0x5, 0x6, 0x1, 0x9, 0x0, 0x7fff, 0x4}) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000400)="f44aa220759a0bece45fb70d9ad513b2e5f2f2a315be9db5f2cf76096cb6c593be9d98b593d8dae5ef0a7c9e7abc305c121a0c438fbe491c6538b29650e121c3b6a4a1493600e702dbda9636f1f7be2169b9996bc07288754fa99023009eee01d7b55647ec59f8a55e613d028b3cbf891a13e8ac2bf4037893bd61710877dcd7a2748f3b908fe28dc720c01cb4e5928fb43a1481d33af3", 0x97}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x801) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x60, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000003c0)={0x5, 0x6, 0x1, 0x9, 0x0, 0x7fff, 0x4}) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000400)="f44aa220759a0bece45fb70d9ad513b2e5f2f2a315be9db5f2cf76096cb6c593be9d98b593d8dae5ef0a7c9e7abc305c121a0c438fbe491c6538b29650e121c3b6a4a1493600e702dbda9636f1f7be2169b9996bc07288754fa99023009eee01d7b55647ec59f8a55e613d028b3cbf891a13e8ac2bf4037893bd61710877dcd7a2748f3b908fe28dc720c01cb4e5928fb43a1481d33af3", 0x97}) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x801) (async) 04:13:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) [ 2809.123588] FAULT_INJECTION: forcing a failure. [ 2809.123588] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.159503] CPU: 0 PID: 23161 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2809.167410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2809.176758] Call Trace: [ 2809.179356] dump_stack+0x1b2/0x281 [ 2809.182991] should_fail.cold+0x10a/0x149 [ 2809.187143] should_failslab+0xd6/0x130 [ 2809.191123] kmem_cache_alloc+0x28e/0x3c0 [ 2809.195268] ? mempool_free+0x1d0/0x1d0 [ 2809.199248] mempool_create_node+0x2d2/0x3e0 [ 2809.203672] bioset_create+0x31b/0x750 [ 2809.207556] ? kmem_cache_alloc_node+0x38b/0x410 [ 2809.212311] blk_alloc_queue_node+0xa8/0xb40 [ 2809.216722] blk_mq_init_queue+0x42/0x90 04:13:12 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1f, 0x2, 0xffff, 0x101, 0x7, 0x8001, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000100)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r6) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000600"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000011}, 0x40005) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10000}, 0x840) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2809.220780] nbd_dev_add+0x2c6/0x800 [ 2809.224496] ? nbd_send_cmd+0x11f0/0x11f0 [ 2809.228642] ? ns_capable_common+0x127/0x150 [ 2809.233046] nbd_genl_connect+0x3a4/0x13e0 [ 2809.237270] ? lock_acquire+0x170/0x3f0 [ 2809.241239] ? nbd_xmit_timeout+0x500/0x500 [ 2809.245557] ? validate_nla+0x192/0x5e0 [ 2809.249527] ? nla_parse+0x157/0x1f0 [ 2809.253241] genl_family_rcv_msg+0x572/0xb20 [ 2809.257641] ? genl_rcv+0x40/0x40 [ 2809.261089] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2809.266536] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2809.271642] ? trace_hardirqs_on+0x10/0x10 [ 2809.275885] genl_rcv_msg+0xaf/0x140 [ 2809.279594] netlink_rcv_skb+0x125/0x390 [ 2809.283655] ? genl_family_rcv_msg+0xb20/0xb20 [ 2809.288232] ? netlink_ack+0x9a0/0x9a0 [ 2809.292115] ? lock_acquire+0x170/0x3f0 [ 2809.296087] genl_rcv+0x24/0x40 [ 2809.299447] netlink_unicast+0x437/0x610 [ 2809.303505] ? netlink_sendskb+0xd0/0xd0 [ 2809.307562] ? __check_object_size+0x179/0x230 [ 2809.312141] netlink_sendmsg+0x648/0xbc0 [ 2809.316201] ? nlmsg_notify+0x1b0/0x1b0 [ 2809.320166] ? kernel_recvmsg+0x210/0x210 [ 2809.324311] ? security_socket_sendmsg+0x83/0xb0 [ 2809.329067] ? nlmsg_notify+0x1b0/0x1b0 [ 2809.333036] sock_sendmsg+0xb5/0x100 [ 2809.336745] ___sys_sendmsg+0x6c8/0x800 [ 2809.340806] ? get_pid_task+0x91/0x130 [ 2809.344689] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2809.349446] ? lock_downgrade+0x740/0x740 [ 2809.353597] ? __fget+0x23e/0x3e0 [ 2809.357055] ? lock_acquire+0x170/0x3f0 [ 2809.361047] ? lock_downgrade+0x740/0x740 [ 2809.365208] ? __fdget+0x19b/0x1f0 [ 2809.368749] ? sockfd_lookup_light+0xb2/0x160 [ 2809.373246] __sys_sendmsg+0xa3/0x120 [ 2809.377045] ? SyS_shutdown+0x160/0x160 [ 2809.381015] ? wait_for_completion_io+0x10/0x10 [ 2809.385701] ? SyS_read+0x210/0x210 [ 2809.389334] SyS_sendmsg+0x27/0x40 [ 2809.392875] ? __sys_sendmsg+0x120/0x120 [ 2809.396930] do_syscall_64+0x1d5/0x640 [ 2809.400816] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2809.405997] RIP: 0033:0x7f56575860a9 [ 2809.409698] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2809.417402] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2809.424665] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2809.431929] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2809.439192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2809.446458] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0109fc000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r4, @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYRES16=r2], 0x4c}}, 0x0) 04:13:12 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 23) [ 2809.480283] nbd: failed to add new device 04:13:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) 04:13:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0109fc000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r4, @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYRES16=r2], 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0109fc000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r4, @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYRES16=r2], 0x4c}}, 0x0) (async) 04:13:13 executing program 5: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000280)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x60, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000003c0)={0x5, 0x6, 0x1, 0x9, 0x0, 0x7fff, 0x4}) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000400)="f44aa220759a0bece45fb70d9ad513b2e5f2f2a315be9db5f2cf76096cb6c593be9d98b593d8dae5ef0a7c9e7abc305c121a0c438fbe491c6538b29650e121c3b6a4a1493600e702dbda9636f1f7be2169b9996bc07288754fa99023009eee01d7b55647ec59f8a55e613d028b3cbf891a13e8ac2bf4037893bd61710877dcd7a2748f3b908fe28dc720c01cb4e5928fb43a1481d33af3", 0x97}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x801) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x60, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f00000003c0)={0x5, 0x6, 0x1, 0x9, 0x0, 0x7fff, 0x4}) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000400)="f44aa220759a0bece45fb70d9ad513b2e5f2f2a315be9db5f2cf76096cb6c593be9d98b593d8dae5ef0a7c9e7abc305c121a0c438fbe491c6538b29650e121c3b6a4a1493600e702dbda9636f1f7be2169b9996bc07288754fa99023009eee01d7b55647ec59f8a55e613d028b3cbf891a13e8ac2bf4037893bd61710877dcd7a2748f3b908fe28dc720c01cb4e5928fb43a1481d33af3", 0x97}) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x801) (async) 04:13:13 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1f, 0x2, 0xffff, 0x101, 0x7, 0x8001, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000100)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r6) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000600"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000011}, 0x40005) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10000}, 0x840) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2809.576091] FAULT_INJECTION: forcing a failure. [ 2809.576091] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.619626] CPU: 0 PID: 23218 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2809.627534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2809.636887] Call Trace: [ 2809.639480] dump_stack+0x1b2/0x281 [ 2809.643118] should_fail.cold+0x10a/0x149 [ 2809.647363] should_failslab+0xd6/0x130 [ 2809.651335] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2809.656435] ? mempool_free+0x1d0/0x1d0 [ 2809.660407] __kmalloc_node+0x38/0x70 [ 2809.664210] mempool_create_node+0xb1/0x3e0 [ 2809.668532] ? mempool_kmalloc+0x20/0x20 [ 2809.672592] bioset_create+0x506/0x750 [ 2809.676474] ? kmem_cache_alloc_node+0x38b/0x410 [ 2809.681230] blk_alloc_queue_node+0xa8/0xb40 [ 2809.685640] blk_mq_init_queue+0x42/0x90 [ 2809.689700] nbd_dev_add+0x2c6/0x800 [ 2809.693417] ? nbd_send_cmd+0x11f0/0x11f0 [ 2809.697827] ? ns_capable_common+0x127/0x150 [ 2809.702235] nbd_genl_connect+0x3a4/0x13e0 [ 2809.706480] ? lock_acquire+0x170/0x3f0 [ 2809.710452] ? nbd_xmit_timeout+0x500/0x500 [ 2809.714778] ? validate_nla+0x192/0x5e0 [ 2809.718839] ? nla_parse+0x157/0x1f0 [ 2809.722637] genl_family_rcv_msg+0x572/0xb20 [ 2809.727044] ? genl_rcv+0x40/0x40 [ 2809.730495] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2809.735942] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2809.741057] ? trace_hardirqs_on+0x10/0x10 [ 2809.745310] genl_rcv_msg+0xaf/0x140 [ 2809.749025] netlink_rcv_skb+0x125/0x390 [ 2809.753087] ? genl_family_rcv_msg+0xb20/0xb20 [ 2809.757667] ? netlink_ack+0x9a0/0x9a0 [ 2809.761563] ? lock_acquire+0x170/0x3f0 [ 2809.765536] genl_rcv+0x24/0x40 [ 2809.768810] netlink_unicast+0x437/0x610 [ 2809.772864] ? netlink_sendskb+0xd0/0xd0 [ 2809.776921] ? __check_object_size+0x179/0x230 [ 2809.781498] netlink_sendmsg+0x648/0xbc0 [ 2809.785643] ? nlmsg_notify+0x1b0/0x1b0 [ 2809.789608] ? kernel_recvmsg+0x210/0x210 [ 2809.793746] ? security_socket_sendmsg+0x83/0xb0 [ 2809.798497] ? nlmsg_notify+0x1b0/0x1b0 [ 2809.802469] sock_sendmsg+0xb5/0x100 [ 2809.806175] ___sys_sendmsg+0x6c8/0x800 [ 2809.810144] ? get_pid_task+0x91/0x130 [ 2809.814024] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2809.818786] ? lock_downgrade+0x740/0x740 [ 2809.822934] ? __fget+0x23e/0x3e0 [ 2809.826388] ? lock_acquire+0x170/0x3f0 [ 2809.830359] ? lock_downgrade+0x740/0x740 [ 2809.834512] ? __fdget+0x19b/0x1f0 [ 2809.838047] ? sockfd_lookup_light+0xb2/0x160 [ 2809.842539] __sys_sendmsg+0xa3/0x120 [ 2809.846342] ? SyS_shutdown+0x160/0x160 [ 2809.850318] ? wait_for_completion_io+0x10/0x10 [ 2809.854989] ? SyS_read+0x210/0x210 [ 2809.858612] SyS_sendmsg+0x27/0x40 [ 2809.862148] ? __sys_sendmsg+0x120/0x120 [ 2809.866273] do_syscall_64+0x1d5/0x640 [ 2809.870159] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2809.875338] RIP: 0033:0x7f56575860a9 [ 2809.879044] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2809.886748] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2809.894010] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2809.901274] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2809.908538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 04:13:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='\'\x00\x00\x00\x00\x00\x00\x00\'\x00\a'], 0x3c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x8801) [ 2809.915804] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:13 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 24) 04:13:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x4000040) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0040fc32319b92e588e2daf673f8bda5a5938c19748ae5f6cb64f7da59c879065205f966cfc930f57dc23af54a44605b8c3abf8867c7cca842953cf635ae3d"], 0x14}}, 0x0) 04:13:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0109fc000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r4, @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYRES16=r2], 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0109fc000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r4, @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYRES16=r2], 0x4c}}, 0x0) (async) 04:13:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x8c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="0b050000"], 0x14}}, 0x0) [ 2809.948069] nbd: failed to add new device 04:13:13 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1f, 0x2, 0xffff, 0x101, 0x7, 0x8001, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000100)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r6) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000600"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000011}, 0x40005) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10000}, 0x840) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x1f, 0x2, 0xffff, 0x101, 0x7, 0x8001, 0x0], 0x7, 0x80000}) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000100)) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r6) (async) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000600"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000011}, 0x40005) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10000}, 0x840) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) 04:13:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='\'\x00\x00\x00\x00\x00\x00\x00\'\x00\a'], 0x3c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x8801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='\'\x00\x00\x00\x00\x00\x00\x00\'\x00\a'], 0x3c}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) (async) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x8801) (async) 04:13:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x8c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) (async, rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="0b050000"], 0x14}}, 0x0) 04:13:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x4000040) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0040fc32319b92e588e2daf673f8bda5a5938c19748ae5f6cb64f7da59c879065205f966cfc930f57dc23af54a44605b8c3abf8867c7cca842953cf635ae3d"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x4000040) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0040fc32319b92e588e2daf673f8bda5a5938c19748ae5f6cb64f7da59c879065205f966cfc930f57dc23af54a44605b8c3abf8867c7cca842953cf635ae3d"], 0x14}}, 0x0) (async) 04:13:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRESOCT, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRESDEC=r0, @ANYBLOB="0c0002"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) [ 2810.069652] FAULT_INJECTION: forcing a failure. [ 2810.069652] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.088751] CPU: 0 PID: 23295 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2810.096655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2810.106005] Call Trace: [ 2810.108591] dump_stack+0x1b2/0x281 [ 2810.112217] should_fail.cold+0x10a/0x149 [ 2810.116363] should_failslab+0xd6/0x130 [ 2810.120337] kmem_cache_alloc+0x28e/0x3c0 [ 2810.124479] ? mempool_free+0x1d0/0x1d0 [ 2810.128456] mempool_create_node+0x2d2/0x3e0 [ 2810.132949] bioset_create+0x506/0x750 [ 2810.136837] ? kmem_cache_alloc_node+0x38b/0x410 [ 2810.141597] blk_alloc_queue_node+0xa8/0xb40 [ 2810.146094] blk_mq_init_queue+0x42/0x90 [ 2810.150154] nbd_dev_add+0x2c6/0x800 [ 2810.153861] ? nbd_send_cmd+0x11f0/0x11f0 [ 2810.158004] ? ns_capable_common+0x127/0x150 [ 2810.162440] nbd_genl_connect+0x3a4/0x13e0 [ 2810.166668] ? lock_acquire+0x170/0x3f0 [ 2810.170645] ? nbd_xmit_timeout+0x500/0x500 [ 2810.174963] ? validate_nla+0x192/0x5e0 [ 2810.178934] ? nla_parse+0x157/0x1f0 [ 2810.182644] genl_family_rcv_msg+0x572/0xb20 [ 2810.187052] ? genl_rcv+0x40/0x40 [ 2810.190507] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2810.195954] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2810.201051] ? trace_hardirqs_on+0x10/0x10 [ 2810.205291] genl_rcv_msg+0xaf/0x140 [ 2810.209001] netlink_rcv_skb+0x125/0x390 [ 2810.213059] ? genl_family_rcv_msg+0xb20/0xb20 [ 2810.217636] ? netlink_ack+0x9a0/0x9a0 [ 2810.221518] ? lock_acquire+0x170/0x3f0 [ 2810.225487] genl_rcv+0x24/0x40 [ 2810.228755] netlink_unicast+0x437/0x610 [ 2810.232805] ? netlink_sendskb+0xd0/0xd0 [ 2810.236857] ? __check_object_size+0x179/0x230 [ 2810.241432] netlink_sendmsg+0x648/0xbc0 [ 2810.245487] ? nlmsg_notify+0x1b0/0x1b0 [ 2810.249449] ? kernel_recvmsg+0x210/0x210 [ 2810.253594] ? security_socket_sendmsg+0x83/0xb0 [ 2810.258342] ? nlmsg_notify+0x1b0/0x1b0 [ 2810.262309] sock_sendmsg+0xb5/0x100 [ 2810.266015] ___sys_sendmsg+0x6c8/0x800 [ 2810.269980] ? get_pid_task+0x91/0x130 [ 2810.273858] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2810.278609] ? lock_downgrade+0x740/0x740 [ 2810.282753] ? __fget+0x23e/0x3e0 [ 2810.286203] ? lock_acquire+0x170/0x3f0 [ 2810.290176] ? lock_downgrade+0x740/0x740 [ 2810.294328] ? __fdget+0x19b/0x1f0 [ 2810.297861] ? sockfd_lookup_light+0xb2/0x160 [ 2810.302347] __sys_sendmsg+0xa3/0x120 [ 2810.306138] ? SyS_shutdown+0x160/0x160 [ 2810.310104] ? wait_for_completion_io+0x10/0x10 [ 2810.314774] ? SyS_read+0x210/0x210 [ 2810.318393] SyS_sendmsg+0x27/0x40 [ 2810.321926] ? __sys_sendmsg+0x120/0x120 [ 2810.325980] do_syscall_64+0x1d5/0x640 [ 2810.329862] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2810.335045] RIP: 0033:0x7f56575860a9 [ 2810.338750] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2810.346453] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2810.353721] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2810.360979] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 04:13:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='\'\x00\x00\x00\x00\x00\x00\x00\'\x00\a'], 0x3c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x8801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='\'\x00\x00\x00\x00\x00\x00\x00\'\x00\a'], 0x3c}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) (async) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x8801) (async) 04:13:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRESOCT, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRESDEC=r0, @ANYBLOB="0c0002"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) [ 2810.368326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2810.375589] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2810.391652] nbd: failed to add new device 04:13:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x8c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="0b050000"], 0x14}}, 0x0) 04:13:13 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 25) 04:13:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x4000040) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0040fc32319b92e588e2daf673f8bda5a5938c19748ae5f6cb64f7da59c879065205f966cfc930f57dc23af54a44605b8c3abf8867c7cca842953cf635ae3d"], 0x14}}, 0x0) 04:13:13 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r3) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2810.502056] FAULT_INJECTION: forcing a failure. [ 2810.502056] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.526261] CPU: 1 PID: 23374 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2810.534165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2810.543512] Call Trace: [ 2810.546102] dump_stack+0x1b2/0x281 [ 2810.549730] should_fail.cold+0x10a/0x149 [ 2810.553874] should_failslab+0xd6/0x130 [ 2810.557845] kmem_cache_alloc+0x28e/0x3c0 [ 2810.561994] ? mempool_free+0x1d0/0x1d0 [ 2810.565966] mempool_create_node+0x2d2/0x3e0 [ 2810.570372] bioset_create+0x506/0x750 [ 2810.574266] ? kmem_cache_alloc_node+0x38b/0x410 [ 2810.579020] blk_alloc_queue_node+0xa8/0xb40 [ 2810.583430] blk_mq_init_queue+0x42/0x90 [ 2810.587491] nbd_dev_add+0x2c6/0x800 [ 2810.591206] ? nbd_send_cmd+0x11f0/0x11f0 [ 2810.595352] ? ns_capable_common+0x127/0x150 [ 2810.599761] nbd_genl_connect+0x3a4/0x13e0 [ 2810.603986] ? lock_acquire+0x170/0x3f0 [ 2810.608020] ? nbd_xmit_timeout+0x500/0x500 [ 2810.612360] ? validate_nla+0x192/0x5e0 [ 2810.616332] ? nla_parse+0x157/0x1f0 [ 2810.620044] genl_family_rcv_msg+0x572/0xb20 [ 2810.624443] ? genl_rcv+0x40/0x40 [ 2810.627888] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2810.633332] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2810.638428] ? trace_hardirqs_on+0x10/0x10 [ 2810.642672] genl_rcv_msg+0xaf/0x140 [ 2810.646380] netlink_rcv_skb+0x125/0x390 [ 2810.650476] ? genl_family_rcv_msg+0xb20/0xb20 [ 2810.655056] ? netlink_ack+0x9a0/0x9a0 [ 2810.658937] ? lock_acquire+0x170/0x3f0 [ 2810.662912] genl_rcv+0x24/0x40 [ 2810.666180] netlink_unicast+0x437/0x610 [ 2810.670258] ? netlink_sendskb+0xd0/0xd0 [ 2810.674311] ? __check_object_size+0x179/0x230 [ 2810.678883] netlink_sendmsg+0x648/0xbc0 [ 2810.682938] ? nlmsg_notify+0x1b0/0x1b0 [ 2810.686903] ? kernel_recvmsg+0x210/0x210 [ 2810.691047] ? security_socket_sendmsg+0x83/0xb0 [ 2810.695798] ? nlmsg_notify+0x1b0/0x1b0 [ 2810.699788] sock_sendmsg+0xb5/0x100 [ 2810.703498] ___sys_sendmsg+0x6c8/0x800 [ 2810.707465] ? get_pid_task+0x91/0x130 [ 2810.711347] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2810.716099] ? lock_downgrade+0x740/0x740 [ 2810.720249] ? __fget+0x23e/0x3e0 [ 2810.723718] ? lock_acquire+0x170/0x3f0 [ 2810.727694] ? lock_downgrade+0x740/0x740 [ 2810.731843] ? __fdget+0x19b/0x1f0 [ 2810.735380] ? sockfd_lookup_light+0xb2/0x160 [ 2810.739867] __sys_sendmsg+0xa3/0x120 [ 2810.743662] ? SyS_shutdown+0x160/0x160 [ 2810.747630] ? wait_for_completion_io+0x10/0x10 [ 2810.752314] ? SyS_read+0x210/0x210 [ 2810.755935] SyS_sendmsg+0x27/0x40 [ 2810.759464] ? __sys_sendmsg+0x120/0x120 [ 2810.763517] do_syscall_64+0x1d5/0x640 [ 2810.767404] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2810.772581] RIP: 0033:0x7f56575860a9 [ 2810.776281] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2810.783982] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2810.791258] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 04:13:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400d6c8", @ANYRES16=r2, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) 04:13:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRESOCT, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRESDEC=r0, @ANYBLOB="0c0002"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 04:13:14 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r3) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffffe6, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r5, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0x38, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400a000) 04:13:14 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 26) [ 2810.798519] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2810.805785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2810.813051] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2810.825572] nbd: failed to add new device 04:13:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) 04:13:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '('}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 04:13:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400d6c8", @ANYRES16=r2, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) 04:13:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffffe6, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r5, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0x38, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400a000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffffe6, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r4) (async) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r5, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0x38, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400a000) (async) [ 2810.943742] FAULT_INJECTION: forcing a failure. [ 2810.943742] name failslab, interval 1, probability 0, space 0, times 0 [ 2810.971695] CPU: 1 PID: 23422 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2810.979608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2810.988958] Call Trace: [ 2810.991550] dump_stack+0x1b2/0x281 [ 2810.995176] should_fail.cold+0x10a/0x149 [ 2810.999325] should_failslab+0xd6/0x130 [ 2811.003300] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2811.008403] bdi_alloc_node+0x5d/0x2e0 [ 2811.012288] blk_alloc_queue_node+0xe2/0xb40 [ 2811.016703] blk_mq_init_queue+0x42/0x90 [ 2811.020770] nbd_dev_add+0x2c6/0x800 [ 2811.024487] ? nbd_send_cmd+0x11f0/0x11f0 [ 2811.028626] ? ns_capable_common+0x127/0x150 [ 2811.033030] nbd_genl_connect+0x3a4/0x13e0 [ 2811.037261] ? lock_acquire+0x170/0x3f0 [ 2811.041233] ? nbd_xmit_timeout+0x500/0x500 [ 2811.045545] ? validate_nla+0x192/0x5e0 [ 2811.049515] ? nla_parse+0x157/0x1f0 [ 2811.053224] genl_family_rcv_msg+0x572/0xb20 [ 2811.057631] ? genl_rcv+0x40/0x40 [ 2811.061076] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2811.066525] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2811.071628] ? trace_hardirqs_on+0x10/0x10 [ 2811.075881] genl_rcv_msg+0xaf/0x140 [ 2811.079632] netlink_rcv_skb+0x125/0x390 [ 2811.083693] ? genl_family_rcv_msg+0xb20/0xb20 [ 2811.088277] ? netlink_ack+0x9a0/0x9a0 [ 2811.092161] ? lock_acquire+0x170/0x3f0 [ 2811.096135] genl_rcv+0x24/0x40 [ 2811.099406] netlink_unicast+0x437/0x610 [ 2811.103467] ? netlink_sendskb+0xd0/0xd0 [ 2811.107520] ? __check_object_size+0x179/0x230 [ 2811.112095] netlink_sendmsg+0x648/0xbc0 [ 2811.116153] ? nlmsg_notify+0x1b0/0x1b0 [ 2811.120208] ? kernel_recvmsg+0x210/0x210 [ 2811.124350] ? security_socket_sendmsg+0x83/0xb0 [ 2811.129095] ? nlmsg_notify+0x1b0/0x1b0 [ 2811.133058] sock_sendmsg+0xb5/0x100 [ 2811.136767] ___sys_sendmsg+0x6c8/0x800 [ 2811.140736] ? get_pid_task+0x91/0x130 [ 2811.144616] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2811.149371] ? lock_downgrade+0x740/0x740 [ 2811.153516] ? __fget+0x23e/0x3e0 [ 2811.156964] ? lock_acquire+0x170/0x3f0 [ 2811.160935] ? lock_downgrade+0x740/0x740 [ 2811.165082] ? __fdget+0x19b/0x1f0 [ 2811.168613] ? sockfd_lookup_light+0xb2/0x160 [ 2811.173103] __sys_sendmsg+0xa3/0x120 [ 2811.176896] ? SyS_shutdown+0x160/0x160 [ 2811.180870] ? wait_for_completion_io+0x10/0x10 [ 2811.185541] ? SyS_read+0x210/0x210 [ 2811.189162] SyS_sendmsg+0x27/0x40 [ 2811.192695] ? __sys_sendmsg+0x120/0x120 [ 2811.196745] do_syscall_64+0x1d5/0x640 [ 2811.200631] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2811.205821] RIP: 0033:0x7f56575860a9 [ 2811.209521] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2811.217220] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2811.224482] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2811.231744] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 04:13:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffffe6, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r5, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0x38, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400a000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffffe6, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r4) (async) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r5, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0x38, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400a000) (async) 04:13:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) 04:13:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400d6c8", @ANYRES16=r2, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400d6c8", @ANYRES16=r2, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) (async) 04:13:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '('}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '('}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) [ 2811.239009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.246271] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2811.260137] nbd: failed to add new device 04:13:14 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 27) [ 2811.303387] nla_parse: 4 callbacks suppressed [ 2811.303392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2811.401263] FAULT_INJECTION: forcing a failure. [ 2811.401263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2811.413079] CPU: 1 PID: 23473 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2811.420957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2811.430315] Call Trace: [ 2811.432900] dump_stack+0x1b2/0x281 [ 2811.436531] should_fail.cold+0x10a/0x149 [ 2811.440675] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2811.446038] __alloc_pages_nodemask+0x21e/0x2900 [ 2811.450797] ? depot_save_stack+0x10d/0x3f0 [ 2811.455145] ? __lock_acquire+0x5fc/0x3f20 [ 2811.459383] ? blk_mq_init_queue+0x42/0x90 [ 2811.463612] ? nbd_dev_add+0x2c6/0x800 [ 2811.467502] ? nbd_genl_connect+0x3a4/0x13e0 [ 2811.471904] ? genl_family_rcv_msg+0x572/0xb20 [ 2811.476481] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2811.481314] ? netlink_unicast+0x437/0x610 [ 2811.485544] ? netlink_sendmsg+0x648/0xbc0 [ 2811.489771] ? sock_sendmsg+0xb5/0x100 [ 2811.493656] ? ___sys_sendmsg+0x6c8/0x800 [ 2811.497803] ? __sys_sendmsg+0xa3/0x120 [ 2811.501768] ? SyS_sendmsg+0x27/0x40 [ 2811.505489] ? cache_alloc_refill+0x2fa/0x350 [ 2811.510006] cache_grow_begin+0x91/0x700 [ 2811.514146] ? fs_reclaim_release+0xd0/0x110 [ 2811.518550] ? check_preemption_disabled+0x35/0x240 [ 2811.523566] cache_alloc_refill+0x273/0x350 [ 2811.527888] kmem_cache_alloc+0x333/0x3c0 [ 2811.532034] ? mempool_free+0x1d0/0x1d0 [ 2811.536012] mempool_create_node+0x2d2/0x3e0 [ 2811.540424] bioset_create+0x506/0x750 [ 2811.544311] ? kmem_cache_alloc_node+0x38b/0x410 [ 2811.549064] blk_alloc_queue_node+0xa8/0xb40 [ 2811.553470] blk_mq_init_queue+0x42/0x90 [ 2811.557528] nbd_dev_add+0x2c6/0x800 [ 2811.561234] ? nbd_send_cmd+0x11f0/0x11f0 [ 2811.565376] ? ns_capable_common+0x127/0x150 [ 2811.569780] nbd_genl_connect+0x3a4/0x13e0 [ 2811.574009] ? lock_acquire+0x170/0x3f0 [ 2811.577981] ? nbd_xmit_timeout+0x500/0x500 [ 2811.582300] ? validate_nla+0x192/0x5e0 [ 2811.586282] ? nla_parse+0x157/0x1f0 [ 2811.589994] genl_family_rcv_msg+0x572/0xb20 [ 2811.594405] ? genl_rcv+0x40/0x40 [ 2811.597854] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2811.603333] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2811.608432] ? trace_hardirqs_on+0x10/0x10 [ 2811.612761] genl_rcv_msg+0xaf/0x140 [ 2811.616468] netlink_rcv_skb+0x125/0x390 [ 2811.620523] ? genl_family_rcv_msg+0xb20/0xb20 [ 2811.625096] ? netlink_ack+0x9a0/0x9a0 [ 2811.628979] ? lock_acquire+0x170/0x3f0 [ 2811.632951] genl_rcv+0x24/0x40 [ 2811.636222] netlink_unicast+0x437/0x610 [ 2811.640281] ? netlink_sendskb+0xd0/0xd0 [ 2811.644334] ? __check_object_size+0x179/0x230 [ 2811.648910] netlink_sendmsg+0x648/0xbc0 [ 2811.652966] ? nlmsg_notify+0x1b0/0x1b0 [ 2811.656938] ? kernel_recvmsg+0x210/0x210 [ 2811.661085] ? security_socket_sendmsg+0x83/0xb0 [ 2811.665836] ? nlmsg_notify+0x1b0/0x1b0 [ 2811.669805] sock_sendmsg+0xb5/0x100 [ 2811.673512] ___sys_sendmsg+0x6c8/0x800 [ 2811.677483] ? get_pid_task+0x91/0x130 [ 2811.681365] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2811.686119] ? lock_downgrade+0x740/0x740 [ 2811.690264] ? __fget+0x23e/0x3e0 [ 2811.693712] ? lock_acquire+0x170/0x3f0 [ 2811.697679] ? lock_downgrade+0x740/0x740 [ 2811.701829] ? __fdget+0x19b/0x1f0 [ 2811.705362] ? sockfd_lookup_light+0xb2/0x160 [ 2811.709849] __sys_sendmsg+0xa3/0x120 [ 2811.713650] ? SyS_shutdown+0x160/0x160 [ 2811.717625] ? wait_for_completion_io+0x10/0x10 [ 2811.722299] ? SyS_read+0x210/0x210 [ 2811.725931] SyS_sendmsg+0x27/0x40 [ 2811.729479] ? __sys_sendmsg+0x120/0x120 [ 2811.733538] do_syscall_64+0x1d5/0x640 [ 2811.737426] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2811.742613] RIP: 0033:0x7f56575860a9 04:13:15 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r3) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r3) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) 04:13:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="7381ab9915d31c662fcbd98060614a0a", 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b03f5ac090000000000a7e40040"], 0x14}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) [ 2811.746314] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2811.754115] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2811.761378] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2811.768643] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.775911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.783183] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) [ 2811.869323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:13:15 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 28) 04:13:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf25010000000c00030004000000000000000c0003000900000000000000819a764bb8e6ba82a04711bf3ef50a9a06650fd655c055b7fe0a4d21d5144523b627bac85cff5c064916bc2390fa99a88a6f39a886a0338b0075b276b8accbea24dcbb19e07083d595608ab46dc7df2e90786d45d08819c58562af173feb6d211e33a16ee0e959169ef89fdc8457e19e2bd7ca4a8884d7be394ce4c0f1ca3215ac9989c3caa0c70858aedcff7a32ce94ac71b3fbc769224e7738306cdff01e7549c1f73cb1861c0456ca0ede793a025440a5a825e6149ff04d3d5c8b1c1884b0e05c63e65fc33036c8e47b61615c11f0ea138f0f7b6d200e10eba84753bed8a6674a5bf83647beb2c9208cbd00d692b59fd50efaf9c7359ce0a15de7ecbb3d6cb3cb6d8b2d994f74cb7b79b2bd6e014abd81f5e59b07f9049dcf0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40811) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) 04:13:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="7381ab9915d31c662fcbd98060614a0a", 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b03f5ac090000000000a7e40040"], 0x14}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="7381ab9915d31c662fcbd98060614a0a", 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b03f5ac090000000000a7e40040"], 0x14}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) (async) 04:13:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '('}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x7c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '('}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) [ 2811.929690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2811.964584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf25010000000c00030004000000000000000c0003000900000000000000819a764bb8e6ba82a04711bf3ef50a9a06650fd655c055b7fe0a4d21d5144523b627bac85cff5c064916bc2390fa99a88a6f39a886a0338b0075b276b8accbea24dcbb19e07083d595608ab46dc7df2e90786d45d08819c58562af173feb6d211e33a16ee0e959169ef89fdc8457e19e2bd7ca4a8884d7be394ce4c0f1ca3215ac9989c3caa0c70858aedcff7a32ce94ac71b3fbc769224e7738306cdff01e7549c1f73cb1861c0456ca0ede793a025440a5a825e6149ff04d3d5c8b1c1884b0e05c63e65fc33036c8e47b61615c11f0ea138f0f7b6d200e10eba84753bed8a6674a5bf83647beb2c9208cbd00d692b59fd50efaf9c7359ce0a15de7ecbb3d6cb3cb6d8b2d994f74cb7b79b2bd6e014abd81f5e59b07f9049dcf0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40811) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40811) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) (async) 04:13:15 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x7c, r4, 0x16, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc431}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc0e6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4c58}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) [ 2812.042710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2812.072596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2812.094535] FAULT_INJECTION: forcing a failure. [ 2812.094535] name failslab, interval 1, probability 0, space 0, times 0 [ 2812.110717] CPU: 0 PID: 23525 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2812.118620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2812.127960] Call Trace: [ 2812.130528] dump_stack+0x1b2/0x281 [ 2812.134191] should_fail.cold+0x10a/0x149 [ 2812.138315] should_failslab+0xd6/0x130 [ 2812.142268] kmem_cache_alloc_node+0x263/0x410 [ 2812.146836] __alloc_skb+0x5c/0x510 [ 2812.150442] kobject_uevent_env+0x882/0xf30 [ 2812.154742] device_del+0x642/0xa80 [ 2812.158350] ? __device_links_no_driver+0x1b0/0x1b0 [ 2812.163349] device_unregister+0x22/0xc0 [ 2812.167385] bdi_unregister+0x42f/0x610 [ 2812.171332] ? wb_blkcg_offline+0x180/0x180 [ 2812.175632] del_gendisk+0x453/0x820 [ 2812.179323] ? refcount_dec_not_one+0x75/0xc0 [ 2812.183795] ? disk_events_poll_msecs_store+0x150/0x150 [ 2812.189254] ? wait_for_completion_io+0x10/0x10 [ 2812.193898] nbd_put.part.0+0xb0/0x140 [ 2812.197767] nbd_genl_connect+0xcf6/0x13e0 [ 2812.201992] ? nbd_xmit_timeout+0x500/0x500 [ 2812.206295] ? validate_nla+0x192/0x5e0 [ 2812.210253] genl_family_rcv_msg+0x572/0xb20 [ 2812.214638] ? genl_rcv+0x40/0x40 [ 2812.218070] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2812.223499] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2812.228584] ? trace_hardirqs_on+0x10/0x10 [ 2812.232805] genl_rcv_msg+0xaf/0x140 [ 2812.236494] netlink_rcv_skb+0x125/0x390 [ 2812.240535] ? genl_family_rcv_msg+0xb20/0xb20 [ 2812.245099] ? netlink_ack+0x9a0/0x9a0 [ 2812.248969] ? lock_acquire+0x170/0x3f0 [ 2812.252925] genl_rcv+0x24/0x40 [ 2812.256181] netlink_unicast+0x437/0x610 [ 2812.260227] ? netlink_sendskb+0xd0/0xd0 [ 2812.264264] ? __check_object_size+0x179/0x230 [ 2812.268820] netlink_sendmsg+0x648/0xbc0 [ 2812.272858] ? nlmsg_notify+0x1b0/0x1b0 [ 2812.276805] ? kernel_recvmsg+0x210/0x210 [ 2812.280930] ? security_socket_sendmsg+0x83/0xb0 [ 2812.285659] ? nlmsg_notify+0x1b0/0x1b0 [ 2812.289608] sock_sendmsg+0xb5/0x100 [ 2812.293296] ___sys_sendmsg+0x6c8/0x800 [ 2812.297254] ? get_pid_task+0x91/0x130 [ 2812.301125] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2812.305870] ? lock_downgrade+0x740/0x740 [ 2812.310002] ? __fget+0x23e/0x3e0 [ 2812.313431] ? lock_acquire+0x170/0x3f0 [ 2812.317379] ? lock_downgrade+0x740/0x740 [ 2812.321595] ? __fdget+0x19b/0x1f0 [ 2812.325113] ? sockfd_lookup_light+0xb2/0x160 [ 2812.329585] __sys_sendmsg+0xa3/0x120 [ 2812.333361] ? SyS_shutdown+0x160/0x160 [ 2812.337316] ? wait_for_completion_io+0x10/0x10 [ 2812.341970] ? SyS_read+0x210/0x210 [ 2812.345580] SyS_sendmsg+0x27/0x40 [ 2812.349097] ? __sys_sendmsg+0x120/0x120 [ 2812.353142] do_syscall_64+0x1d5/0x640 [ 2812.357010] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2812.362180] RIP: 0033:0x7f56575860a9 [ 2812.365863] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2812.373544] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2812.380786] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2812.388037] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2812.395286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2812.402531] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:15 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 29) 04:13:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="7381ab9915d31c662fcbd98060614a0a", 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b03f5ac090000000000a7e40040"], 0x14}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) 04:13:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000000000000}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x24}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ']'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000ea", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) 04:13:15 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (rerun: 32) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x7c, r4, 0x16, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc431}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc0e6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4c58}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) [ 2812.477178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 04:13:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40811) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40811) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r4, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) (async) [ 2812.533111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2812.551570] FAULT_INJECTION: forcing a failure. [ 2812.551570] name failslab, interval 1, probability 0, space 0, times 0 [ 2812.587653] CPU: 1 PID: 23584 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2812.595554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2812.604904] Call Trace: [ 2812.607489] dump_stack+0x1b2/0x281 [ 2812.611128] should_fail.cold+0x10a/0x149 [ 2812.615281] should_failslab+0xd6/0x130 [ 2812.619252] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2812.624339] __kmalloc_node_track_caller+0x38/0x70 [ 2812.629245] __alloc_skb+0x96/0x510 [ 2812.632852] kobject_uevent_env+0x882/0xf30 [ 2812.637155] device_del+0x642/0xa80 [ 2812.640772] ? __device_links_no_driver+0x1b0/0x1b0 [ 2812.645785] device_unregister+0x22/0xc0 [ 2812.649846] bdi_unregister+0x42f/0x610 [ 2812.653813] ? wb_blkcg_offline+0x180/0x180 [ 2812.658136] del_gendisk+0x453/0x820 [ 2812.661847] ? refcount_dec_not_one+0x75/0xc0 [ 2812.666330] ? disk_events_poll_msecs_store+0x150/0x150 [ 2812.671677] ? wait_for_completion_io+0x10/0x10 [ 2812.676324] nbd_put.part.0+0xb0/0x140 [ 2812.680189] nbd_genl_connect+0xcf6/0x13e0 [ 2812.684417] ? nbd_xmit_timeout+0x500/0x500 [ 2812.688724] ? validate_nla+0x192/0x5e0 [ 2812.692696] genl_family_rcv_msg+0x572/0xb20 [ 2812.697147] ? genl_rcv+0x40/0x40 [ 2812.700590] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2812.706030] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2812.711123] ? trace_hardirqs_on+0x10/0x10 [ 2812.715343] genl_rcv_msg+0xaf/0x140 [ 2812.719046] netlink_rcv_skb+0x125/0x390 [ 2812.723093] ? genl_family_rcv_msg+0xb20/0xb20 [ 2812.727660] ? netlink_ack+0x9a0/0x9a0 [ 2812.731538] ? lock_acquire+0x170/0x3f0 [ 2812.735495] genl_rcv+0x24/0x40 [ 2812.738750] netlink_unicast+0x437/0x610 [ 2812.742808] ? netlink_sendskb+0xd0/0xd0 [ 2812.746849] ? __check_object_size+0x179/0x230 [ 2812.751407] netlink_sendmsg+0x648/0xbc0 [ 2812.755451] ? nlmsg_notify+0x1b0/0x1b0 [ 2812.759402] ? kernel_recvmsg+0x210/0x210 [ 2812.763531] ? security_socket_sendmsg+0x83/0xb0 [ 2812.768262] ? nlmsg_notify+0x1b0/0x1b0 [ 2812.772210] sock_sendmsg+0xb5/0x100 [ 2812.775902] ___sys_sendmsg+0x6c8/0x800 [ 2812.779850] ? get_pid_task+0x91/0x130 [ 2812.783713] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2812.788453] ? lock_downgrade+0x740/0x740 [ 2812.792582] ? __fget+0x23e/0x3e0 [ 2812.796017] ? lock_acquire+0x170/0x3f0 [ 2812.799967] ? lock_downgrade+0x740/0x740 [ 2812.804185] ? __fdget+0x19b/0x1f0 [ 2812.807701] ? sockfd_lookup_light+0xb2/0x160 [ 2812.812172] __sys_sendmsg+0xa3/0x120 [ 2812.815952] ? SyS_shutdown+0x160/0x160 [ 2812.819904] ? wait_for_completion_io+0x10/0x10 [ 2812.824555] ? SyS_read+0x210/0x210 [ 2812.828158] SyS_sendmsg+0x27/0x40 [ 2812.831677] ? __sys_sendmsg+0x120/0x120 [ 2812.835717] do_syscall_64+0x1d5/0x640 [ 2812.839603] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2812.844787] RIP: 0033:0x7f56575860a9 [ 2812.848588] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2812.856286] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2812.863538] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2812.870792] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2812.878177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2812.885431] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000ee226b031734763a94ca9fa6ba7492eafe39a7b87e83f59f4b756fc9cfd5c9887c86f925bb5e", @ANYRES16=r2, @ANYBLOB="0b03000000000000000000000000efccde3bc0f93f99ded85838550abc884f103d92b8d132f64c91d3ea529988ae5407fdd569f4b164f96ffd1353a017d09adfb7e707"], 0x14}}, 0x0) 04:13:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '{'}]}, 0x24}}, 0x0) 04:13:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000000000000}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x24}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ']'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000ea", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) 04:13:16 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 30) 04:13:16 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x7c, r4, 0x16, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc431}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc0e6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4c58}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:16 executing program 3: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"164c88f73b7f12985b028a34357bb6997c7d7f5fe7b2dbad0385585c615fd4fd", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r1, 0x0, 0x0, r2, r3, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r2, r5, r3, r3, r3], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"c4d1def500d6bc30c617117ef7c79a47eaa6b1148e818ef9debc65e2baaf8f01", r4}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000100)={0x10000000, 0x2380, 0x5}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000000f43ec1617801f88c5e0b4d5d7fb6ca2689504958499ba167df4d1b1c167f89176c18e190cc1bd0cb4aaaef9bb5729330a9745e6c6d9846269361d5191cf70aec7a83981407337d77859dd722d16e3077246cbdf2dfcb2a939538e165adf6213448efc9d7de164ff5a9cc56b471bbe3cb6b68d94d86f461a93699129837072520da81835223fc66aa8e090a7a93438ab2009839ea1532acb83", @ANYRES16=r7, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000000000000}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x24}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ']'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000ea", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000000000000}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x24}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ']'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000ea", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) [ 2813.037154] FAULT_INJECTION: forcing a failure. [ 2813.037154] name failslab, interval 1, probability 0, space 0, times 0 [ 2813.053082] CPU: 0 PID: 23633 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2813.060980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2813.070339] Call Trace: [ 2813.072923] dump_stack+0x1b2/0x281 [ 2813.076553] should_fail.cold+0x10a/0x149 [ 2813.080700] should_failslab+0xd6/0x130 [ 2813.084669] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2813.089770] blk_throtl_init+0x7a/0x590 [ 2813.093742] blkcg_init_queue+0x18f/0x410 [ 2813.097976] blk_alloc_queue_node+0x826/0xb40 [ 2813.102478] blk_mq_init_queue+0x42/0x90 [ 2813.106536] nbd_dev_add+0x2c6/0x800 [ 2813.110250] ? nbd_send_cmd+0x11f0/0x11f0 [ 2813.114393] ? ns_capable_common+0x127/0x150 [ 2813.118801] nbd_genl_connect+0x3a4/0x13e0 [ 2813.123033] ? nbd_xmit_timeout+0x500/0x500 [ 2813.127354] ? lock_downgrade+0x740/0x740 [ 2813.131493] ? validate_nla+0x192/0x5e0 [ 2813.135463] ? nla_parse+0x157/0x1f0 [ 2813.139173] genl_family_rcv_msg+0x572/0xb20 [ 2813.143577] ? genl_rcv+0x40/0x40 [ 2813.147025] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2813.152471] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2813.157572] ? trace_hardirqs_on+0x10/0x10 [ 2813.161805] genl_rcv_msg+0xaf/0x140 [ 2813.165517] netlink_rcv_skb+0x125/0x390 [ 2813.169572] ? genl_family_rcv_msg+0xb20/0xb20 [ 2813.174169] ? netlink_ack+0x9a0/0x9a0 [ 2813.178075] ? lock_acquire+0x170/0x3f0 [ 2813.182049] genl_rcv+0x24/0x40 [ 2813.185324] netlink_unicast+0x437/0x610 [ 2813.189378] ? netlink_sendskb+0xd0/0xd0 [ 2813.193431] ? __check_object_size+0x179/0x230 [ 2813.198011] netlink_sendmsg+0x648/0xbc0 [ 2813.202079] ? nlmsg_notify+0x1b0/0x1b0 [ 2813.206070] ? kernel_recvmsg+0x210/0x210 [ 2813.210223] ? security_socket_sendmsg+0x83/0xb0 [ 2813.214973] ? nlmsg_notify+0x1b0/0x1b0 [ 2813.218950] sock_sendmsg+0xb5/0x100 [ 2813.222658] ___sys_sendmsg+0x6c8/0x800 [ 2813.226625] ? get_pid_task+0x91/0x130 [ 2813.230503] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2813.235256] ? lock_downgrade+0x740/0x740 [ 2813.239399] ? __fget+0x23e/0x3e0 [ 2813.242847] ? lock_acquire+0x170/0x3f0 [ 2813.246816] ? lock_downgrade+0x740/0x740 [ 2813.250973] ? __fdget+0x19b/0x1f0 [ 2813.254508] ? sockfd_lookup_light+0xb2/0x160 [ 2813.258997] __sys_sendmsg+0xa3/0x120 [ 2813.262795] ? SyS_shutdown+0x160/0x160 [ 2813.266805] ? wait_for_completion_io+0x10/0x10 [ 2813.271470] ? SyS_read+0x210/0x210 [ 2813.275092] SyS_sendmsg+0x27/0x40 [ 2813.278624] ? __sys_sendmsg+0x120/0x120 [ 2813.282683] do_syscall_64+0x1d5/0x640 [ 2813.286570] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2813.291752] RIP: 0033:0x7f56575860a9 [ 2813.295452] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2813.303157] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2813.310438] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2813.317700] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2813.324966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2813.332227] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '{'}]}, 0x24}}, 0x0) 04:13:16 executing program 3: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"164c88f73b7f12985b028a34357bb6997c7d7f5fe7b2dbad0385585c615fd4fd", 0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r1, 0x0, 0x0, r2, r3, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r2, r5, r3, r3, r3], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"c4d1def500d6bc30c617117ef7c79a47eaa6b1148e818ef9debc65e2baaf8f01", r4}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000100)={0x10000000, 0x2380, 0x5}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000000f43ec1617801f88c5e0b4d5d7fb6ca2689504958499ba167df4d1b1c167f89176c18e190cc1bd0cb4aaaef9bb5729330a9745e6c6d9846269361d5191cf70aec7a83981407337d77859dd722d16e3077246cbdf2dfcb2a939538e165adf6213448efc9d7de164ff5a9cc56b471bbe3cb6b68d94d86f461a93699129837072520da81835223fc66aa8e090a7a93438ab2009839ea1532acb83", @ANYRES16=r7, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000ee226b031734763a94ca9fa6ba7492eafe39a7b87e83f59f4b756fc9cfd5c9887c86f925bb5e", @ANYRES16=r2, @ANYBLOB="0b03000000000000000000000000efccde3bc0f93f99ded85838550abc884f103d92b8d132f64c91d3ea529988ae5407fdd569f4b164f96ffd1353a017d09adfb7e707"], 0x14}}, 0x0) 04:13:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) [ 2813.371373] nbd: failed to add new device 04:13:16 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 31) [ 2813.412304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:16 executing program 3: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"164c88f73b7f12985b028a34357bb6997c7d7f5fe7b2dbad0385585c615fd4fd", 0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r1, 0x0, 0x0, r2, r3, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r2, r5, r3, r3, r3], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000080)={"c4d1def500d6bc30c617117ef7c79a47eaa6b1148e818ef9debc65e2baaf8f01", r4}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000100)={0x10000000, 0x2380, 0x5}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000000f43ec1617801f88c5e0b4d5d7fb6ca2689504958499ba167df4d1b1c167f89176c18e190cc1bd0cb4aaaef9bb5729330a9745e6c6d9846269361d5191cf70aec7a83981407337d77859dd722d16e3077246cbdf2dfcb2a939538e165adf6213448efc9d7de164ff5a9cc56b471bbe3cb6b68d94d86f461a93699129837072520da81835223fc66aa8e090a7a93438ab2009839ea1532acb83", @ANYRES16=r7, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) 04:13:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000ee226b031734763a94ca9fa6ba7492eafe39a7b87e83f59f4b756fc9cfd5c9887c86f925bb5e", @ANYRES16=r2, @ANYBLOB="0b03000000000000000000000000efccde3bc0f93f99ded85838550abc884f103d92b8d132f64c91d3ea529988ae5407fdd569f4b164f96ffd1353a017d09adfb7e707"], 0x14}}, 0x0) [ 2813.511599] FAULT_INJECTION: forcing a failure. [ 2813.511599] name failslab, interval 1, probability 0, space 0, times 0 [ 2813.545588] CPU: 0 PID: 23675 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2813.553491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2813.562840] Call Trace: [ 2813.565429] dump_stack+0x1b2/0x281 [ 2813.569062] should_fail.cold+0x10a/0x149 [ 2813.573220] should_failslab+0xd6/0x130 [ 2813.577198] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2813.581869] blk_alloc_queue_stats+0x3c/0x100 [ 2813.586364] blk_alloc_queue_node+0x125/0xb40 [ 2813.590864] blk_mq_init_queue+0x42/0x90 [ 2813.595021] nbd_dev_add+0x2c6/0x800 [ 2813.598734] ? nbd_send_cmd+0x11f0/0x11f0 [ 2813.602883] ? ns_capable_common+0x127/0x150 [ 2813.607294] nbd_genl_connect+0x3a4/0x13e0 04:13:17 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x2}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4040000) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x20040, 0x0) r11 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f00000006c0)=0x4) sendmsg$FOU_CMD_ADD(r10, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r11, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0xffff}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x84000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r9, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r13) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r14, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2813.611527] ? lock_acquire+0x170/0x3f0 [ 2813.615496] ? nbd_xmit_timeout+0x500/0x500 [ 2813.619817] ? validate_nla+0x192/0x5e0 [ 2813.623790] ? nla_parse+0x157/0x1f0 [ 2813.627501] genl_family_rcv_msg+0x572/0xb20 [ 2813.631903] ? genl_rcv+0x40/0x40 [ 2813.635351] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2813.640805] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2813.645908] ? trace_hardirqs_on+0x10/0x10 [ 2813.650143] genl_rcv_msg+0xaf/0x140 [ 2813.653846] netlink_rcv_skb+0x125/0x390 [ 2813.657905] ? genl_family_rcv_msg+0xb20/0xb20 [ 2813.662486] ? netlink_ack+0x9a0/0x9a0 [ 2813.666371] ? lock_acquire+0x170/0x3f0 [ 2813.670345] genl_rcv+0x24/0x40 [ 2813.673618] netlink_unicast+0x437/0x610 [ 2813.677673] ? netlink_sendskb+0xd0/0xd0 [ 2813.681725] ? __check_object_size+0x179/0x230 [ 2813.686299] netlink_sendmsg+0x648/0xbc0 [ 2813.690356] ? nlmsg_notify+0x1b0/0x1b0 [ 2813.694321] ? kernel_recvmsg+0x210/0x210 [ 2813.698465] ? security_socket_sendmsg+0x83/0xb0 [ 2813.703211] ? nlmsg_notify+0x1b0/0x1b0 [ 2813.707179] sock_sendmsg+0xb5/0x100 [ 2813.710894] ___sys_sendmsg+0x6c8/0x800 [ 2813.714857] ? get_pid_task+0x91/0x130 [ 2813.718732] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2813.723488] ? lock_downgrade+0x740/0x740 [ 2813.727650] ? __fget+0x23e/0x3e0 [ 2813.731102] ? lock_acquire+0x170/0x3f0 [ 2813.735083] ? lock_downgrade+0x740/0x740 [ 2813.739233] ? __fdget+0x19b/0x1f0 [ 2813.742764] ? sockfd_lookup_light+0xb2/0x160 [ 2813.747258] __sys_sendmsg+0xa3/0x120 [ 2813.751054] ? SyS_shutdown+0x160/0x160 [ 2813.755023] ? wait_for_completion_io+0x10/0x10 [ 2813.759689] ? SyS_read+0x210/0x210 [ 2813.763320] SyS_sendmsg+0x27/0x40 [ 2813.766854] ? __sys_sendmsg+0x120/0x120 [ 2813.770908] do_syscall_64+0x1d5/0x640 [ 2813.774797] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2813.779973] RIP: 0033:0x7f56575860a9 [ 2813.783677] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2813.791381] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2813.798639] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2813.805985] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2813.813248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2813.820604] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="07002abd7000fddbdf2505000000050001000000000008000700ac1414aa14000200fc00000000000000000000000000000114000200fe8000000000000000000000000000412700070073bd4a4aa537797374656d5f753a6f626a6563745f623a70616d5f7661040000006e5f743a733000001400030020010000000000000000000000000001050001000000000008000500ac1e0001f8d3ac7a1af86083fc24f89c839e9940088fe15b5f716c7dd932ce38f19cd1e15be54b81c2d41aee4ca4379ed32a6077f98ea5ea1ecddbe6ab54b57eaa2975edcf8f772c637634b485cab3cbb918239f386863448d6ca5a0e51d887d65a227ebf40235df2e9c37ae46acf731210c5400d9c55ee1088abc3138832abfb740974e957becc95c1255a8a8031bdae0eceb739719c37d66153626"], 0x98}, 0x1, 0x0, 0x0, 0x40000044}, 0x90) 04:13:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 04:13:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b03000069e33480c52cd188e9000000"], 0x14}}, 0x0) 04:13:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '{'}]}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '{'}]}, 0x24}}, 0x0) (async) [ 2813.856534] nbd: failed to add new device 04:13:17 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 32) [ 2813.890585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 32) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x40000044}, 0x90) 04:13:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002babd772d53181fb3a193c997c28e394aab8fceded7cf4cc7c9198aa9857d3af6000375b06556a073632424c8566d0f0a1c26d772d66c14ecb0a9866efbfdb7bd7e41d68f262726a45a031b98c6bb95a67a19520cbd5447b31428e0bebacfd2b0bd71fe851b4b5f96a0ee25d48234324706e8bbd067442b53665c868cccd876121b601c25"], 0x4c}}, 0x0) 04:13:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b03000069e33480c52cd188e9000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b03000069e33480c52cd188e9000000"], 0x14}}, 0x0) (async) 04:13:17 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x2}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) (async) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4040000) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x20040, 0x0) r11 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x10) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f00000006c0)=0x4) (rerun: 64) sendmsg$FOU_CMD_ADD(r10, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r11, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0xffff}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x84000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r9, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r13) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r14, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2813.987161] FAULT_INJECTION: forcing a failure. [ 2813.987161] name failslab, interval 1, probability 0, space 0, times 0 [ 2814.046749] CPU: 0 PID: 23729 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2814.054656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2814.064005] Call Trace: [ 2814.066589] dump_stack+0x1b2/0x281 [ 2814.070214] should_fail.cold+0x10a/0x149 [ 2814.074367] should_failslab+0xd6/0x130 [ 2814.078342] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2814.083450] blkg_alloc+0x92/0x5c0 [ 2814.086995] blkcg_init_queue+0x23/0x410 [ 2814.091050] blk_alloc_queue_node+0x826/0xb40 [ 2814.095544] blk_mq_init_queue+0x42/0x90 [ 2814.099601] nbd_dev_add+0x2c6/0x800 [ 2814.103309] ? nbd_send_cmd+0x11f0/0x11f0 [ 2814.107453] ? ns_capable_common+0x127/0x150 [ 2814.111854] nbd_genl_connect+0x3a4/0x13e0 [ 2814.116082] ? lock_acquire+0x170/0x3f0 [ 2814.120049] ? nbd_xmit_timeout+0x500/0x500 [ 2814.124366] ? validate_nla+0x192/0x5e0 [ 2814.128334] ? nla_parse+0x157/0x1f0 [ 2814.132054] genl_family_rcv_msg+0x572/0xb20 [ 2814.136459] ? genl_rcv+0x40/0x40 [ 2814.139919] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2814.145369] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2814.150466] ? trace_hardirqs_on+0x10/0x10 [ 2814.154700] genl_rcv_msg+0xaf/0x140 [ 2814.158407] netlink_rcv_skb+0x125/0x390 [ 2814.162463] ? genl_family_rcv_msg+0xb20/0xb20 [ 2814.167039] ? netlink_ack+0x9a0/0x9a0 [ 2814.170926] ? lock_acquire+0x170/0x3f0 [ 2814.174899] genl_rcv+0x24/0x40 [ 2814.178178] netlink_unicast+0x437/0x610 [ 2814.182234] ? netlink_sendskb+0xd0/0xd0 [ 2814.186296] ? __check_object_size+0x179/0x230 [ 2814.190877] netlink_sendmsg+0x648/0xbc0 [ 2814.194970] ? nlmsg_notify+0x1b0/0x1b0 [ 2814.198934] ? kernel_recvmsg+0x210/0x210 [ 2814.203079] ? security_socket_sendmsg+0x83/0xb0 [ 2814.207848] ? nlmsg_notify+0x1b0/0x1b0 [ 2814.211813] sock_sendmsg+0xb5/0x100 [ 2814.215517] ___sys_sendmsg+0x6c8/0x800 [ 2814.219485] ? get_pid_task+0x91/0x130 [ 2814.223368] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2814.228125] ? lock_downgrade+0x740/0x740 [ 2814.232270] ? __fget+0x23e/0x3e0 [ 2814.235722] ? lock_acquire+0x170/0x3f0 [ 2814.239690] ? lock_downgrade+0x740/0x740 [ 2814.243838] ? __fdget+0x19b/0x1f0 [ 2814.247373] ? sockfd_lookup_light+0xb2/0x160 [ 2814.251862] __sys_sendmsg+0xa3/0x120 [ 2814.255744] ? SyS_shutdown+0x160/0x160 [ 2814.259713] ? wait_for_completion_io+0x10/0x10 [ 2814.264382] ? SyS_read+0x210/0x210 [ 2814.268004] SyS_sendmsg+0x27/0x40 [ 2814.271535] ? __sys_sendmsg+0x120/0x120 [ 2814.275586] do_syscall_64+0x1d5/0x640 [ 2814.279470] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2814.284647] RIP: 0033:0x7f56575860a9 [ 2814.288347] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2814.296041] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2814.303304] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2814.310566] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2814.317826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2814.325088] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b03000069e33480c52cd188e9000000"], 0x14}}, 0x0) 04:13:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002babd772d53181fb3a193c997c28e394aab8fceded7cf4cc7c9198aa9857d3af6000375b06556a073632424c8566d0f0a1c26d772d66c14ecb0a9866efbfdb7bd7e41d68f262726a45a031b98c6bb95a67a19520cbd5447b31428e0bebacfd2b0bd71fe851b4b5f96a0ee25d48234324706e8bbd067442b53665c868cccd876121b601c25"], 0x4c}}, 0x0) 04:13:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0, 0x0, r3, r4, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r3, r6, r4, r4, r4], 0x1f, 0x5, 0x4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)="0a94e4a4964a4b22561475b987423709aff1ec391c7a228dc5f6893d4788a2e5324fdc3233a99155012c2ee412e684e93c11cd30e075be9008d4b1340d10aadcfc64f48709279e1640d0695f1b12ec60f3480d05d7a06d70f300dc10bee774abc330934f9cd06a0e052789e0479b0102f2a435c2e3a12a78676b2bcbd011cbb416389ceb3e06326f230ba69f0fc9436738700a35cddf1f2bfb15ff52110666cd523b9c520c18b8296f3fac75e0ce9cc95c779f5d82deb1a9d9e23707a468ec7ba7d97a75d7c9f9df8e81bdcabf4306d66deaa796380bac242bb5df2a4e73be5b97d6c2d984338a728fcb73070d17e973555239176b90bd7fb5043b948cfb1100ca496c2cf2dc4295e950556d1ac782b7ea1c532299a0e4528865ebca79dcfa3613fc12c24e619ed8b47fbfe63da48febfbee72dbbd17b0e0e5fcc5d76f82202d70dd44583055283549b59f9c59e9cbc3bd6ce8ca1c6ab2528308af97ef937f31317c62d38a3a5084b0df6efd2ef288e28cac8aaaed946f47935c09280c1e654b8a777cf4fc2f86ea6a319e4078699b8f7fb700a444ede331ea56d93b4c807c3e2ea2bd255eef2e97642c82df42307cb08e49774dd8291d0ff37e1d26b0e222dc6f059d857122cffee6366e531f2818cdd70bbfd93908ffc2c309e21f27d133f1eafcfa2303581abc0fd3fd33e8271a26a5f2cef82043e653921b8973de9fcd8848634c33dfa12c9d2013eb2850ca67c4cc37d49ac642510d11630212dc1c114039df01ee2992a48222a472bf5d55d11883cdd97c507b9bb8eaf5c3c41e59004cb84bf4d6ea65603ed1e60712754fe54237726a5d7944a4023ffee9ac9c708cd657a1107e14688d0867f8c136da279c2e221eb67e4eadc7157a3a1cb586d1d8bb3268dfbd537ee97073c2411b0f9008a25c57a75c6abbc08fbf1c66ab51224697f4733e0acce203230253b5f44d39e170873ca794c6cc602297403c41c6b6db3fe02299131d423822367d5f64c2b2e41581a5c780269c9b366a12013e65ebdd2f0674f6fee06b7823cd6aa9f1e96a386c61f431c803238416d20e250e3a4ef46c624145da10d96c56923f9169417a692a00e8c1ce11914a0680581a90903c450f9d46adac64bf21df8ecf2ec255e3f27f2be0753afad6b6d03701cec1331cb168ef46a65eafdbee2a845dfdd0db08cc559ef1625f66a8e415430c7a940d8650af8ba39f5c3abbda8d52956b03741e2876f2abc4a91ff9bb156d53c23b13d55db02a34e004e0ed867b953a20595915bdd3a9a4449dd5045fcf6c389ab09e2fbe797fa1afd8b192f109445fb8bf951de60304dc3d5b747e35862bb2eba587cd6a12ece90f32cf16501001053e6b344f9967ec6bcd86a88d8acc7f3fa66b8327fd6e8cfd99c4b0ac86056808537aa8007b5ce606193bebc39d6279a6a6f67265a9670e1e1a90b831bae84255ee683eb6fe83b6d98f1d042ee860d4b065424c6457d92f9e6d33f1e190313ceeac3ab9a9091d1a5d20e6b46381e5e871ef559389d5dd7b250379921493c6a33535b7e94d42565bbd3ec7a1962e81460ed1db70a99015b9ea254201934605282f34ca5f754a1ce6603e659f8bc9ecf155a74820855f6156f49aee3cc47bddbae0131f91e4ede17d04b031807ba5707158fe3fb25a62751e9e7a2e02354330b5744b0f008371f5eceafe291d569430072d0c543022f33ea5145b52c301869d7fede9c5cc24fb8d31a2675edf962ccb4b1dbbc53c0c0acbd0cc29210592fefd8ec05bb5fc8cca5ac6335a0380703b4621ceb4a49cef986fd02410e51eefe7a0b52f9bf42f53d530a3b5b3e05c185352297f96b41f1af5dfa54fedad603c501fde331427f43179d87ef71e94cf8c17fa443e2d112697d80f91115b01522c874f509263d8c0ccf536d1aded079c172b66d5c9436f06ddb9a498a0984fa00eecc1c0d7781356dad391fd7bb937d34b9ac75e43bfc507a584e863940da225c06a58bc1f18fd2b13048a41cc2e94c4f394b3df89a1463b424ddc272462600c6ea62acd6e29da477fb0006681fde1d7e74a863d300958955032fd988b4638e5f7e3e7c5733180735898e5e96abe7a4c7e17f4f04228fc9b2ad425c112a7484b6512c1056c7715dbf9e0b3701469fe2564616b362871fae5bb054afb760b0c95717a80a5da8e4ac183f39c4c0e80856354761353a0d423c19966c21ab3e782f7ad29555768eaca03b982e24a73d5953aea08d05f849f984ff1a005d618bbcf4156927f0397b8d612a1f3bf16ab4c47c5f08f01f6f788d53e69340455eb3ea53856006dbbc33282250460707e28be9c7d886fc1712619c577aeb4022f6baeaa18637dd7b60a7e796e11c29e45847ac106a6a653c9ab74ac8600f080b04545c1a958ba38e914408b937e98a99a66eb04f73befec389f4a9a83d8946aeb8cc4fe751ded73b572fb69cde06d195ed7f0e6c3aee4d43c6dbc5106d2b9efda8458fb3ec85bd1d40362b9e1880c5229724327c4f1d6831a04ab2a6f3d6eff51eb436b33689417df8138727d56b0f134fa9f28622aa281adb12ebe6cb4c198b1a7604387e9f1f5003d66a148bc2797658211c71923787472132e27d60d8552ae7494da2739e89791bb399c241a4c6639311b3c3f7d9cb44eb83b55c5aa11c4e427906b36ac91443091ebb728149ad8ba09cc9bbe8ca829ed5178529c1be406bf6bd51ed9cea84df5864d0df6f18633f94e007e37305ec115e31ca410472054afa085cdee8ef5f7e52c8335787c37c12e9d4ce1d9d4be8f022c8346684d23304932b58b13e4fdb0c4b1b2a175566a92e5a4c3974a0fe44bb77537030e51c8d0ad6b7a15a62e07a0f4546ae7640b5cfbbb08181defd37b3a5a764a9efb2f6534768cd350966a1ba4f243def3a91f3dd5804fcd1a537eefd248e9dacdc2b054497d7b328420461168f5de31a117059aab037022acc29edde238293901cb1de2e9aa0cca5d2c2be57ee0ea280921b7c1f6671872b93f89a41ebf02b51e582a6448dc453db1adbafd428edd03fdd8b8475dd264adf4bfacc0e4e505b5ad518fd6b48ba18cc348e8e20092d81c7b0b1ffd2f7995001009e19e07d1951e9dff96f75d4bb51d42d5c9b06258ceba2e4603073700fce74abd7d8febee6d02c29ead808dad6c438538d942795234afa84bc9bda15808cf331482a56fd6dd762a4f29589afe944edcfbc8e79a5635eea614d1f00e54282d80bc4d81d04c6900f1e8558b0c4100cac175a90b654e9b01dd1c94d8009a6291cb8c865654433ddd61cb3e892862454e423840f1a5444353a8ae2fc9b2206e61f533051b4ed5b1303774d0f5752f5c6c60741d70b2e69ae21b8ad86f0c5bed348e4e03afff838c14974690b613e1ab83a622d4a184a0f8743275081c99427c6ea0dc4f3cabf3bd9c70b29a51f80533a834deb0a2c1214ba6fd6a78273c369d68a5e7c15c5514c0fff3899072aca30e702849f1782fc30b3243b74cfd318f67f15dbf727dfe1a94237fd857c8eb5e91671ef74ec2c07dda252ad639853a9679070212e1032fcbca864cc32fd07d0c2e26a801bccf9af524eb6c1bd65c52e8ff12850c5a89fc7e72dafeee35259faedaf51c0fb24467fdcf9e796d2017baaa8ee2a39634380d91d2e26a2b3fc421334feda4af89361a06f5de52b836d16fcd25dd99521d8ca81a7c4761f97600771d9a8308243aa50fa23f999543d1ccb07e47795b33f058cb283038de4af00ce6992f3ecaf96aa7a142617fbeb783653663aec6d72411a6e96d7ac537e3c951991475018ee6edb7318a255fb3754d45556827e06ad3bc93daea5b4d721a4d61d14900fa95d1cc403d3f3cc920aa4b86d9c416c7afb1ed103832782a8a6d1c94da76cd199e18bdb40cdc1d91fc381fb59b500b8526cbb733a7c6338776baaded11dc233c50eaf5e19507e846916bc15f4a120d3f308a9fc4a12f14c2eb031334a8070641e84fbcbce2cb38a02002f56c259b9624b3999f9e32d4ff923d26eeadc427ee141a7cd8ad8b42417a2d33e9e11d2a0282022654f90df87c1f2e7c11d0cf031b02d86139b8e2de09225b32e984559f4a1b4056a50bf178a33081eacede0db14809ef043f55a7672a0e547222f1a6482afaca504fbfeade20c34bfd41acc87cb1f1fe1816b7eb2dc1227467ac7c7207766a3493013c8de3bb5dd3846ac275b1d4885588446e7974cd76d74a8a59bdbe7e8f499880cbc3ca54d40fb0605e688548bcea835271b030a7ab9f9289b5d757e46df5ee5469a8c9788d44978a18bacef84064d76d7854f26c30f1efe1e923ae45c82311474af55607dbd022dd6e02588236882102cf87ac615779370144c30ff964015acdbbd777efb87978cbe1cbb703b51b025c5f1c0cf92a6876ac29443d2ff026fb80077956c88d3e5d0466ee4c50ab84bef6eeee31e4e93b04d963b9ce16a10e33eb363654b90711905889332f95662af39a0c08c1171d9ea20189889b93ec9f233d4ce77a49943a94374424f636cfa954876ac5e0bd737b82ceb079ed594b441ba4bfd16774221cea6824990d8b7f8f6e3911decc7c50a0a4501b40bd2b30bc46e10f97aaadacc1c85671f3ecfc4888b440210e244a128c931697c2174b20e0fc293cdf2af6de8e69e322ca4c587354e3a686f3cd292b0391dddf81e1af6214206a4863af40de4b3e50b33324a9db9af0518589321f27861ba9b733182031e776323b0200d7ebc496ccdcba9029987cbe0fd997f509ebf1992d6631d63c2a80d33503254f9470e41564bd05677a7fdb1cdd150f619c5af900bd4e78fb8b81352483981e02f3cfed4e39816bbf10fef1cbefce016ff5da0a06fc7e25ca534800c991cde1085354448c4fc6b077afae6978d1c88e29f577c82376556e277938f6fe4d946342ffebef8c529eb495ef32ac7ed4879dda8acf55066fbdc4e428ccd5347a2b8982fdfe3b6f825dcc88c71b34fb9b8876c1b8021ee4b9fcba1de7c799d8742a002fe79610cd40de1374084a38f6b3156aa04d6a463be5562a40b78c07561f3369ae2afcaf6e535290566904eb588fe4bc30261729d6980e72b1b3f3741abc144fdd072fd8e77a113c7cd50bb53ae8e26ca9ac767e4e4ca3339ffe1f87d027b7a310834d837bb1e7342917a001ed4b89f692808660c6ff886b4b309e912266d36b163d6c7dd66ebfa7fb3214a338f30b45805a6d07ee93fc9164241159be86c745f0286e52d5e7c83528806f4b5c29aed9db33bccbf0b59404df68d6aae97f4a1e57b633d4cc8a64a1bfd2fdf7edec3bc6482b3bf0c8f00b6dca37fe6598b40adc56e29b60ae8fa3ec594b53bf6f4183eca1a09ba13df80bf86075663e72488303bf56f2975628ddf3f0ec911b2143390bbda26318df7eb9cc6cbf4d66dcb5857cdec36955ae607f63b5c046fb4067fe00e6ffcba1008a930fbb86254acc68268e6adce8e07f478bfb6ffa3ca7b43cca399af093c3ee7e3c28889cb507df77c80d62883ae0627116f08b1252032d571b85cc3c87de605b32c8e38c2bc16c36ae393671ccc5b07933ac1526ca8ee2a7ef068b3ec388268ea2d8c72c198bd573f50b1c6c1f04d4ca4d8dbbfda1d069981ebc4edc1907803b199e7253004280604ffd6e4c17d22fadbbfc7e5e43f288fe8facbbb1b034911b03602c4108217b850b3eb918188a294a5bcb7ec928c95566b67ad130eca25d2db46e40a24c1d513c238b40f5e428f003a882a70fdedf103ad6adf8371e160dab97056c29e38f68b5a77c0ba991ef6a7e324f", &(0x7f0000000000)=@udp=r5}, 0x20) [ 2814.366367] nbd: failed to add new device 04:13:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x40000044}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="07002abd7000fddbdf2505000000050001000000000008000700ac1414aa14000200fc00000000000000000000000000000114000200fe8000000000000000000000000000412700070073bd4a4aa537797374656d5f753a6f626a6563745f623a70616d5f7661040000006e5f743a733000001400030020010000000000000000000000000001050001000000000008000500ac1e0001f8d3ac7a1af86083fc24f89c839e9940088fe15b5f716c7dd932ce38f19cd1e15be54b81c2d41aee4ca4379ed32a6077f98ea5ea1ecddbe6ab54b57eaa2975edcf8f772c637634b485cab3cbb918239f386863448d6ca5a0e51d887d65a227ebf40235df2e9c37ae46acf731210c5400d9c55ee1088abc3138832abfb740974e957becc95c1255a8a8031bdae0eceb739719c37d66153626"], 0x98}, 0x1, 0x0, 0x0, 0x40000044}, 0x90) (async) 04:13:17 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 33) 04:13:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0, 0x0, r3, r4, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r3, r6, r4, r4, r4], 0x1f, 0x5, 0x4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)="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", &(0x7f0000000000)=@udp=r5}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0, 0x0, r3, r4, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r3, r6, r4, r4, r4], 0x1f, 0x5, 0x4}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)="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", &(0x7f0000000000)=@udp=r5}, 0x20) (async) 04:13:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x30b}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) [ 2814.469549] nbd: must specify a size in bytes for the device [ 2814.504390] FAULT_INJECTION: forcing a failure. [ 2814.504390] name failslab, interval 1, probability 0, space 0, times 0 [ 2814.515813] CPU: 0 PID: 23779 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2814.523686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2814.533034] Call Trace: [ 2814.535622] dump_stack+0x1b2/0x281 [ 2814.539250] should_fail.cold+0x10a/0x149 [ 2814.543396] should_failslab+0xd6/0x130 [ 2814.547368] kmem_cache_alloc_node_trace+0x58/0x400 [ 2814.552384] throtl_pd_alloc+0x59/0x990 [ 2814.556358] ? throtl_add_bio_tg+0x1e0/0x1e0 [ 2814.560759] blkcg_activate_policy+0x23e/0x5c0 [ 2814.565345] blk_throtl_init+0x408/0x590 [ 2814.569404] blkcg_init_queue+0x18f/0x410 [ 2814.573548] blk_alloc_queue_node+0x826/0xb40 [ 2814.578040] blk_mq_init_queue+0x42/0x90 [ 2814.582093] nbd_dev_add+0x2c6/0x800 [ 2814.585801] ? nbd_send_cmd+0x11f0/0x11f0 [ 2814.589951] ? ns_capable_common+0x127/0x150 [ 2814.594358] nbd_genl_connect+0x3a4/0x13e0 [ 2814.598587] ? lock_acquire+0x170/0x3f0 [ 2814.602558] ? nbd_xmit_timeout+0x500/0x500 [ 2814.606880] ? validate_nla+0x192/0x5e0 [ 2814.610848] ? nla_parse+0x157/0x1f0 [ 2814.614560] genl_family_rcv_msg+0x572/0xb20 [ 2814.618971] ? genl_rcv+0x40/0x40 [ 2814.622419] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2814.627873] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2814.632973] ? trace_hardirqs_on+0x10/0x10 [ 2814.637210] genl_rcv_msg+0xaf/0x140 [ 2814.640921] netlink_rcv_skb+0x125/0x390 [ 2814.644979] ? genl_family_rcv_msg+0xb20/0xb20 [ 2814.649555] ? netlink_ack+0x9a0/0x9a0 [ 2814.653435] ? lock_acquire+0x170/0x3f0 [ 2814.657408] genl_rcv+0x24/0x40 [ 2814.660676] netlink_unicast+0x437/0x610 [ 2814.664727] ? netlink_sendskb+0xd0/0xd0 [ 2814.668780] ? __check_object_size+0x179/0x230 [ 2814.673359] netlink_sendmsg+0x648/0xbc0 [ 2814.677416] ? nlmsg_notify+0x1b0/0x1b0 [ 2814.681380] ? kernel_recvmsg+0x210/0x210 [ 2814.685518] ? security_socket_sendmsg+0x83/0xb0 [ 2814.690269] ? nlmsg_notify+0x1b0/0x1b0 [ 2814.694234] sock_sendmsg+0xb5/0x100 [ 2814.697946] ___sys_sendmsg+0x6c8/0x800 [ 2814.701914] ? get_pid_task+0x91/0x130 [ 2814.705801] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2814.710553] ? lock_downgrade+0x740/0x740 [ 2814.714704] ? __fget+0x23e/0x3e0 [ 2814.718153] ? lock_acquire+0x170/0x3f0 [ 2814.722125] ? lock_downgrade+0x740/0x740 [ 2814.726283] ? __fdget+0x19b/0x1f0 [ 2814.729822] ? sockfd_lookup_light+0xb2/0x160 [ 2814.734316] __sys_sendmsg+0xa3/0x120 [ 2814.738113] ? SyS_shutdown+0x160/0x160 [ 2814.742085] ? wait_for_completion_io+0x10/0x10 [ 2814.746751] ? SyS_read+0x210/0x210 [ 2814.750373] SyS_sendmsg+0x27/0x40 [ 2814.753904] ? __sys_sendmsg+0x120/0x120 [ 2814.757960] do_syscall_64+0x1d5/0x640 [ 2814.761857] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2814.767035] RIP: 0033:0x7f56575860a9 04:13:18 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x2}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4040000) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x20040, 0x0) (async) r11 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f00000006c0)=0x4) sendmsg$FOU_CMD_ADD(r10, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r11, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0xffff}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x84000) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r9, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r13) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r14, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002babd772d53181fb3a193c997c28e394aab8fceded7cf4cc7c9198aa9857d3af6000375b06556a073632424c8566d0f0a1c26d772d66c14ecb0a9866efbfdb7bd7e41d68f262726a45a031b98c6bb95a67a19520cbd5447b31428e0bebacfd2b0bd71fe851b4b5f96a0ee25d48234324706e8bbd067442b53665c868cccd876121b601c25"], 0x4c}}, 0x0) 04:13:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x68, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:auditd_unit_file_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) [ 2814.770734] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2814.778438] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2814.785785] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2814.793138] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2814.800399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2814.807662] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0, 0x0, r3, r4, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r3, r6, r4, r4, r4], 0x1f, 0x5, 0x4}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)="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", &(0x7f0000000000)=@udp=r5}, 0x20) 04:13:18 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 34) 04:13:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x68, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:auditd_unit_file_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x68, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:auditd_unit_file_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) (async) 04:13:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x30b}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) [ 2814.917886] nbd: must specify a size in bytes for the device 04:13:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r1, @ANYRES32, @ANYBLOB="00008f21d11bf612e4150000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="2f7cee6c6547f6fc526f08b9f2df21aaf9fdc10f9d9aa6e9332340cab55c40a92ff43d5171dd69056910e8069f1aaaf1c02cca4c7e7ed2429576e644838c24615fc89e8ce682fa43b93af651aba23bdb137196a3382a5279c3bc", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) 04:13:18 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r7, 0x0, 0x0, r8, r9, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r8, r11, r9, r9, r9], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x4e20, 0x1, @mcast2, 0xfffffffe}}, 0x0, 0x0, 0x50, 0x0, "1496037e5533adc0492a88e9c20dae8d73b16da9b6a43a0e264539ff5d8a570b43366fd739ffa0f17ae761a9ab3259925a19598f013c405be9dec6fb1b7861be4c1165e3d998882a3dfd8f9ef19be0f9"}, 0xd8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r13, 0x0, 0x0, r14, r15, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r16, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r14, r17, r15, r15, r15], 0x1f, 0x5, 0x4}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x8c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xfffffffffffffe22, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r12}, {0x8, 0x1, r16}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x0, 0xa, 'nbd\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2815.017708] FAULT_INJECTION: forcing a failure. [ 2815.017708] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.049177] CPU: 1 PID: 23842 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2815.057175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 04:13:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, r2, 0x0, 0x0, 0x0], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r3, 0x0, 0x0, r4, r5, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r4, r7, r5, r5, r5], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r14, 0x0, 0x0, r15, r16, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r17, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r15, r18, r16, r16, r16], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, 0x0, 0x329, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4c6fae04}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r17}, {0x8}, {0x8, 0x1, r19}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0xdc}}, 0x880) r20 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r20, @ANYBLOB="0100000000000078137ca2ff000005000000"], 0x14}}, 0x0) 04:13:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x68, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:auditd_unit_file_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x68, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:auditd_unit_file_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) (async) [ 2815.066529] Call Trace: [ 2815.069121] dump_stack+0x1b2/0x281 [ 2815.072755] should_fail.cold+0x10a/0x149 [ 2815.076910] should_failslab+0xd6/0x130 [ 2815.080883] __kmalloc+0x2c1/0x400 [ 2815.084428] ? blk_stat_alloc_callback+0x81/0x2f0 [ 2815.089261] ? blk_mq_can_queue+0x40/0x40 [ 2815.093405] ? queue_set_hctx_shared+0x210/0x210 [ 2815.098160] blk_stat_alloc_callback+0x81/0x2f0 [ 2815.102833] blk_mq_init_allocated_queue+0x80/0xfd0 [ 2815.107861] ? blkcg_init_queue+0x19f/0x410 [ 2815.112191] ? blk_alloc_queue_node+0x82f/0xb40 [ 2815.116863] blk_mq_init_queue+0x5a/0x90 [ 2815.120925] nbd_dev_add+0x2c6/0x800 [ 2815.124636] ? nbd_send_cmd+0x11f0/0x11f0 [ 2815.128781] ? ns_capable_common+0x127/0x150 [ 2815.133200] nbd_genl_connect+0x3a4/0x13e0 [ 2815.137427] ? lock_acquire+0x170/0x3f0 [ 2815.141394] ? nbd_xmit_timeout+0x500/0x500 [ 2815.145706] ? validate_nla+0x192/0x5e0 [ 2815.149674] ? nla_parse+0x157/0x1f0 [ 2815.153475] genl_family_rcv_msg+0x572/0xb20 [ 2815.157883] ? genl_rcv+0x40/0x40 [ 2815.161333] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2815.166776] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2815.171877] ? trace_hardirqs_on+0x10/0x10 [ 2815.176113] genl_rcv_msg+0xaf/0x140 [ 2815.179827] netlink_rcv_skb+0x125/0x390 [ 2815.183890] ? genl_family_rcv_msg+0xb20/0xb20 [ 2815.188468] ? netlink_ack+0x9a0/0x9a0 [ 2815.192351] ? lock_acquire+0x170/0x3f0 [ 2815.196327] genl_rcv+0x24/0x40 [ 2815.199600] netlink_unicast+0x437/0x610 [ 2815.203660] ? netlink_sendskb+0xd0/0xd0 [ 2815.207721] ? __check_object_size+0x179/0x230 [ 2815.212299] netlink_sendmsg+0x648/0xbc0 [ 2815.216370] ? nlmsg_notify+0x1b0/0x1b0 [ 2815.220340] ? kernel_recvmsg+0x210/0x210 [ 2815.224487] ? security_socket_sendmsg+0x83/0xb0 [ 2815.229240] ? nlmsg_notify+0x1b0/0x1b0 [ 2815.233390] sock_sendmsg+0xb5/0x100 [ 2815.237097] ___sys_sendmsg+0x6c8/0x800 [ 2815.241066] ? get_pid_task+0x91/0x130 [ 2815.244945] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2815.249696] ? lock_downgrade+0x740/0x740 [ 2815.253840] ? __fget+0x23e/0x3e0 [ 2815.257292] ? lock_acquire+0x170/0x3f0 [ 2815.261262] ? lock_downgrade+0x740/0x740 [ 2815.265415] ? __fdget+0x19b/0x1f0 [ 2815.268959] ? sockfd_lookup_light+0xb2/0x160 [ 2815.273452] __sys_sendmsg+0xa3/0x120 [ 2815.277248] ? SyS_shutdown+0x160/0x160 [ 2815.281214] ? wait_for_completion_io+0x10/0x10 [ 2815.285881] ? SyS_read+0x210/0x210 [ 2815.289500] SyS_sendmsg+0x27/0x40 [ 2815.293029] ? __sys_sendmsg+0x120/0x120 [ 2815.297079] do_syscall_64+0x1d5/0x640 [ 2815.300963] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2815.306142] RIP: 0033:0x7f56575860a9 [ 2815.309848] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2815.317671] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2815.324943] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2815.332211] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2815.339482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2815.346745] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:18 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 35) 04:13:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, r2, 0x0, 0x0, 0x0], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r3, 0x0, 0x0, r4, r5, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r4, r7, r5, r5, r5], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r14, 0x0, 0x0, r15, r16, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r17, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r15, r18, r16, r16, r16], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, 0x0, 0x329, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4c6fae04}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r17}, {0x8}, {0x8, 0x1, r19}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0xdc}}, 0x880) (async) r20 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r20, @ANYBLOB="0100000000000078137ca2ff000005000000"], 0x14}}, 0x0) 04:13:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x30b}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) [ 2815.367817] nbd: failed to add new device 04:13:18 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r7, 0x0, 0x0, r8, r9, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r8, r11, r9, r9, r9], 0x1f, 0x5, 0x4}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x4e20, 0x1, @mcast2, 0xfffffffe}}, 0x0, 0x0, 0x50, 0x0, "1496037e5533adc0492a88e9c20dae8d73b16da9b6a43a0e264539ff5d8a570b43366fd739ffa0f17ae761a9ab3259925a19598f013c405be9dec6fb1b7861be4c1165e3d998882a3dfd8f9ef19be0f9"}, 0xd8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r13, 0x0, 0x0, r14, r15, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r16, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r14, r17, r15, r15, r15], 0x1f, 0x5, 0x4}) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x8c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xfffffffffffffe22, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r12}, {0x8, 0x1, r16}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x0, 0xa, 'nbd\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:18 executing program 3: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r1, @ANYRES32, @ANYBLOB="00008f21d11bf612e4150000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="2f7cee6c6547f6fc526f08b9f2df21aaf9fdc10f9d9aa6e9332340cab55c40a92ff43d5171dd69056910e8069f1aaaf1c02cca4c7e7ed2429576e644838c24615fc89e8ce682fa43b93af651aba23bdb137196a3382a5279c3bc", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) 04:13:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, r2, 0x0, 0x0, 0x0], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r3, 0x0, 0x0, r4, r5, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r4, r7, r5, r5, r5], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r14, 0x0, 0x0, r15, r16, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r17, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r15, r18, r16, r16, r16], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, 0x0, 0x329, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4c6fae04}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r17}, {0x8}, {0x8, 0x1, r19}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}]}, 0xdc}}, 0x880) (async) r20 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r20, @ANYBLOB="0100000000000078137ca2ff000005000000"], 0x14}}, 0x0) 04:13:18 executing program 3: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) 04:13:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r1, @ANYRES32, @ANYBLOB="00008f21d11bf612e4150000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="2f7cee6c6547f6fc526f08b9f2df21aaf9fdc10f9d9aa6e9332340cab55c40a92ff43d5171dd69056910e8069f1aaaf1c02cca4c7e7ed2429576e644838c24615fc89e8ce682fa43b93af651aba23bdb137196a3382a5279c3bc", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r1, @ANYRES32, @ANYBLOB="00008f21d11bf612e4150000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="2f7cee6c6547f6fc526f08b9f2df21aaf9fdc10f9d9aa6e9332340cab55c40a92ff43d5171dd69056910e8069f1aaaf1c02cca4c7e7ed2429576e644838c24615fc89e8ce682fa43b93af651aba23bdb137196a3382a5279c3bc", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) [ 2815.496030] FAULT_INJECTION: forcing a failure. [ 2815.496030] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.547115] CPU: 1 PID: 23894 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2815.555024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2815.564386] Call Trace: [ 2815.566975] dump_stack+0x1b2/0x281 [ 2815.570607] should_fail.cold+0x10a/0x149 [ 2815.574758] should_failslab+0xd6/0x130 [ 2815.578736] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2815.583858] __kmalloc_node+0x38/0x70 [ 2815.587662] blk_mq_init_allocated_queue+0x17b/0xfd0 [ 2815.592768] ? blkcg_init_queue+0x19f/0x410 [ 2815.597094] ? blk_alloc_queue_node+0x82f/0xb40 [ 2815.601786] blk_mq_init_queue+0x5a/0x90 [ 2815.605849] nbd_dev_add+0x2c6/0x800 [ 2815.609560] ? nbd_send_cmd+0x11f0/0x11f0 [ 2815.613706] ? ns_capable_common+0x127/0x150 [ 2815.618114] nbd_genl_connect+0x3a4/0x13e0 [ 2815.622341] ? lock_acquire+0x170/0x3f0 [ 2815.626312] ? nbd_xmit_timeout+0x500/0x500 [ 2815.630632] ? validate_nla+0x192/0x5e0 [ 2815.634607] ? nla_parse+0x157/0x1f0 [ 2815.638315] genl_family_rcv_msg+0x572/0xb20 [ 2815.642721] ? genl_rcv+0x40/0x40 [ 2815.646176] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2815.651626] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2815.656721] ? trace_hardirqs_on+0x10/0x10 [ 2815.660958] genl_rcv_msg+0xaf/0x140 [ 2815.664669] netlink_rcv_skb+0x125/0x390 [ 2815.668724] ? genl_family_rcv_msg+0xb20/0xb20 [ 2815.673384] ? netlink_ack+0x9a0/0x9a0 [ 2815.677265] ? lock_acquire+0x170/0x3f0 [ 2815.681242] genl_rcv+0x24/0x40 [ 2815.684515] netlink_unicast+0x437/0x610 [ 2815.688571] ? netlink_sendskb+0xd0/0xd0 [ 2815.692636] ? __check_object_size+0x179/0x230 [ 2815.697218] netlink_sendmsg+0x648/0xbc0 [ 2815.701283] ? nlmsg_notify+0x1b0/0x1b0 [ 2815.705260] ? kernel_recvmsg+0x210/0x210 [ 2815.709407] ? security_socket_sendmsg+0x83/0xb0 [ 2815.714158] ? nlmsg_notify+0x1b0/0x1b0 [ 2815.718122] sock_sendmsg+0xb5/0x100 [ 2815.721829] ___sys_sendmsg+0x6c8/0x800 [ 2815.725893] ? get_pid_task+0x91/0x130 [ 2815.729780] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2815.734537] ? lock_downgrade+0x740/0x740 [ 2815.738684] ? __fget+0x23e/0x3e0 [ 2815.742132] ? lock_acquire+0x170/0x3f0 [ 2815.746102] ? lock_downgrade+0x740/0x740 [ 2815.750266] ? __fdget+0x19b/0x1f0 [ 2815.753878] ? sockfd_lookup_light+0xb2/0x160 [ 2815.758373] __sys_sendmsg+0xa3/0x120 [ 2815.762171] ? SyS_shutdown+0x160/0x160 [ 2815.766145] ? wait_for_completion_io+0x10/0x10 [ 2815.770817] ? SyS_read+0x210/0x210 [ 2815.774446] SyS_sendmsg+0x27/0x40 [ 2815.777978] ? __sys_sendmsg+0x120/0x120 [ 2815.782038] do_syscall_64+0x1d5/0x640 [ 2815.785930] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2815.791116] RIP: 0033:0x7f56575860a9 [ 2815.794826] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2815.802530] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2815.809799] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2815.817067] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2815.824334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2815.831605] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r4, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:13:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x40048d0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000300)={r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="10002abd7000fddbdf3503000000"], 0x14}}, 0x44014) 04:13:19 executing program 3: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) [ 2815.855118] nbd: failed to add new device 04:13:19 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 36) 04:13:19 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async, rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r7, 0x0, 0x0, r8, r9, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r8, r11, r9, r9, r9], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x4e20, 0x1, @mcast2, 0xfffffffe}}, 0x0, 0x0, 0x50, 0x0, "1496037e5533adc0492a88e9c20dae8d73b16da9b6a43a0e264539ff5d8a570b43366fd739ffa0f17ae761a9ab3259925a19598f013c405be9dec6fb1b7861be4c1165e3d998882a3dfd8f9ef19be0f9"}, 0xd8) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r13, 0x0, 0x0, r14, r15, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r16, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r14, r17, r15, r15, r15], 0x1f, 0x5, 0x4}) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x8c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xfffffffffffffe22, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r12}, {0x8, 0x1, r16}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x0, 0xa, 'nbd\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (rerun: 64) 04:13:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9, 0xe5, 0x20, 0x8], 0x4, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r10}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000811}, 0xc1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r11) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r12, 0x30b}, 0x14}}, 0x0) 04:13:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x40048d0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000300)={r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="10002abd7000fddbdf3503000000"], 0x14}}, 0x44014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x40048d0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) (async) syz_open_dev$dri(&(0x7f0000000280), 0x4, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000300)={r4}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) (async) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="10002abd7000fddbdf3503000000"], 0x14}}, 0x44014) (async) 04:13:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) [ 2816.000130] FAULT_INJECTION: forcing a failure. [ 2816.000130] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.017403] CPU: 1 PID: 23945 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2816.025306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2816.034657] Call Trace: [ 2816.037247] dump_stack+0x1b2/0x281 [ 2816.040890] should_fail.cold+0x10a/0x149 [ 2816.045049] should_failslab+0xd6/0x130 [ 2816.049023] kmem_cache_alloc_node+0x263/0x410 [ 2816.053602] __alloc_skb+0x5c/0x510 [ 2816.057230] kobject_uevent_env+0x882/0xf30 [ 2816.061543] device_del+0x642/0xa80 [ 2816.065162] ? __device_links_no_driver+0x1b0/0x1b0 [ 2816.070176] device_unregister+0x22/0xc0 [ 2816.074226] bdi_unregister+0x42f/0x610 [ 2816.078178] ? wb_blkcg_offline+0x180/0x180 [ 2816.082484] del_gendisk+0x453/0x820 [ 2816.086203] ? refcount_dec_not_one+0x75/0xc0 [ 2816.090691] ? disk_events_poll_msecs_store+0x150/0x150 [ 2816.096050] ? wait_for_completion_io+0x10/0x10 [ 2816.100701] nbd_put.part.0+0xb0/0x140 [ 2816.104569] nbd_genl_connect+0xcf6/0x13e0 [ 2816.108794] ? nbd_xmit_timeout+0x500/0x500 [ 2816.113112] ? validate_nla+0x192/0x5e0 [ 2816.117094] genl_family_rcv_msg+0x572/0xb20 [ 2816.121504] ? genl_rcv+0x40/0x40 [ 2816.124954] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2816.130389] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2816.135474] ? trace_hardirqs_on+0x10/0x10 [ 2816.139691] genl_rcv_msg+0xaf/0x140 [ 2816.143389] netlink_rcv_skb+0x125/0x390 [ 2816.147432] ? genl_family_rcv_msg+0xb20/0xb20 [ 2816.151991] ? netlink_ack+0x9a0/0x9a0 [ 2816.155856] ? lock_acquire+0x170/0x3f0 [ 2816.159808] genl_rcv+0x24/0x40 [ 2816.163064] netlink_unicast+0x437/0x610 [ 2816.167114] ? netlink_sendskb+0xd0/0xd0 [ 2816.171158] ? __check_object_size+0x179/0x230 [ 2816.175719] netlink_sendmsg+0x648/0xbc0 [ 2816.179769] ? nlmsg_notify+0x1b0/0x1b0 [ 2816.183731] ? kernel_recvmsg+0x210/0x210 [ 2816.187863] ? security_socket_sendmsg+0x83/0xb0 [ 2816.192599] ? nlmsg_notify+0x1b0/0x1b0 [ 2816.196559] sock_sendmsg+0xb5/0x100 [ 2816.200249] ___sys_sendmsg+0x6c8/0x800 [ 2816.204206] ? get_pid_task+0x91/0x130 [ 2816.208070] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2816.212805] ? lock_downgrade+0x740/0x740 [ 2816.216933] ? __fget+0x23e/0x3e0 [ 2816.220363] ? lock_acquire+0x170/0x3f0 [ 2816.224313] ? lock_downgrade+0x740/0x740 [ 2816.228445] ? __fdget+0x19b/0x1f0 [ 2816.231959] ? sockfd_lookup_light+0xb2/0x160 [ 2816.236432] __sys_sendmsg+0xa3/0x120 [ 2816.240207] ? SyS_shutdown+0x160/0x160 [ 2816.244166] ? wait_for_completion_io+0x10/0x10 [ 2816.248815] ? SyS_read+0x210/0x210 [ 2816.252427] SyS_sendmsg+0x27/0x40 [ 2816.255946] ? __sys_sendmsg+0x120/0x120 [ 2816.259984] do_syscall_64+0x1d5/0x640 [ 2816.263852] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2816.269016] RIP: 0033:0x7f56575860a9 [ 2816.272704] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2816.280388] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2816.287631] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2816.294879] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.302124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2816.309369] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r4, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) (async) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r4, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) 04:13:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (rerun: 32) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 04:13:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9, 0xe5, 0x20, 0x8], 0x4, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r10}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000811}, 0xc1) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r11) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r12, 0x30b}, 0x14}}, 0x0) 04:13:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x40048d0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000300)={r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="10002abd7000fddbdf3503000000"], 0x14}}, 0x44014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x40048d0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)) (async) syz_open_dev$dri(&(0x7f0000000280), 0x4, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f0000000300)={r4}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) (async) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="10002abd7000fddbdf3503000000"], 0x14}}, 0x44014) (async) 04:13:19 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 37) 04:13:19 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x9, 0xe5, 0x20, 0x8], 0x4, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r10}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000811}, 0xc1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r11) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r12, 0x30b}, 0x14}}, 0x0) [ 2816.489251] nla_parse: 5 callbacks suppressed [ 2816.489364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2816.515028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:13:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, r4, 0x0, 0x0, 0x0], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r10, 0x0, 0x0, r11, r12, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r13, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r11, r14, r12, r12, r12], 0x1f, 0x5, 0x4}) r15 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r16, 0x0, 0x0, r17, r18, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r19, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r17, r20, r18, r18, r18], 0x1f, 0x5, 0x4}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r8}, {0x8, 0x1, r13}, {0x8, 0x1, r15}, {0x8}, {0x8, 0x1, r19}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044011) [ 2816.535155] FAULT_INJECTION: forcing a failure. [ 2816.535155] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.557361] CPU: 1 PID: 24005 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2816.565267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2816.574629] Call Trace: [ 2816.577216] dump_stack+0x1b2/0x281 [ 2816.580839] should_fail.cold+0x10a/0x149 [ 2816.584973] should_failslab+0xd6/0x130 [ 2816.588927] kmem_cache_alloc_node+0x263/0x410 [ 2816.593509] __alloc_skb+0x5c/0x510 [ 2816.597130] kobject_uevent_env+0x882/0xf30 [ 2816.601446] device_del+0x642/0xa80 [ 2816.605056] ? __device_links_no_driver+0x1b0/0x1b0 [ 2816.610050] device_unregister+0x22/0xc0 [ 2816.614091] bdi_unregister+0x42f/0x610 [ 2816.618056] ? wb_blkcg_offline+0x180/0x180 [ 2816.622362] del_gendisk+0x453/0x820 [ 2816.626072] ? refcount_dec_not_one+0x75/0xc0 [ 2816.630551] ? disk_events_poll_msecs_store+0x150/0x150 [ 2816.635904] ? wait_for_completion_io+0x10/0x10 [ 2816.640551] nbd_put.part.0+0xb0/0x140 [ 2816.644418] nbd_genl_connect+0xcf6/0x13e0 [ 2816.648642] ? nbd_xmit_timeout+0x500/0x500 [ 2816.652960] ? validate_nla+0x192/0x5e0 [ 2816.656922] genl_family_rcv_msg+0x572/0xb20 [ 2816.661315] ? genl_rcv+0x40/0x40 [ 2816.664752] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2816.670192] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2816.675274] ? trace_hardirqs_on+0x10/0x10 [ 2816.679507] genl_rcv_msg+0xaf/0x140 [ 2816.683206] netlink_rcv_skb+0x125/0x390 [ 2816.687247] ? genl_family_rcv_msg+0xb20/0xb20 [ 2816.691808] ? netlink_ack+0x9a0/0x9a0 [ 2816.695678] ? lock_acquire+0x170/0x3f0 [ 2816.699634] genl_rcv+0x24/0x40 [ 2816.702890] netlink_unicast+0x437/0x610 [ 2816.706933] ? netlink_sendskb+0xd0/0xd0 [ 2816.710972] ? __check_object_size+0x179/0x230 [ 2816.715541] netlink_sendmsg+0x648/0xbc0 [ 2816.719589] ? nlmsg_notify+0x1b0/0x1b0 [ 2816.723551] ? kernel_recvmsg+0x210/0x210 [ 2816.727722] ? security_socket_sendmsg+0x83/0xb0 [ 2816.732464] ? nlmsg_notify+0x1b0/0x1b0 [ 2816.736428] sock_sendmsg+0xb5/0x100 [ 2816.740123] ___sys_sendmsg+0x6c8/0x800 [ 2816.744092] ? get_pid_task+0x91/0x130 [ 2816.747967] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2816.752740] ? lock_downgrade+0x740/0x740 [ 2816.756873] ? __fget+0x23e/0x3e0 [ 2816.760310] ? lock_acquire+0x170/0x3f0 [ 2816.764265] ? lock_downgrade+0x740/0x740 [ 2816.768399] ? __fdget+0x19b/0x1f0 [ 2816.771925] ? sockfd_lookup_light+0xb2/0x160 [ 2816.776419] __sys_sendmsg+0xa3/0x120 [ 2816.780204] ? SyS_shutdown+0x160/0x160 [ 2816.784170] ? wait_for_completion_io+0x10/0x10 [ 2816.788830] ? SyS_read+0x210/0x210 [ 2816.792437] SyS_sendmsg+0x27/0x40 [ 2816.795954] ? __sys_sendmsg+0x120/0x120 [ 2816.799995] do_syscall_64+0x1d5/0x640 [ 2816.803963] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2816.809138] RIP: 0033:0x7f56575860a9 [ 2816.812838] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2816.820625] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2816.827884] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2816.835135] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.842390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2816.849684] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:20 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 38) 04:13:20 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x100, 0x70bd28}, 0x14}}, 0x0) 04:13:20 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, r4, 0x0, 0x0, 0x0], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r10, 0x0, 0x0, r11, r12, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r13, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r11, r14, r12, r12, r12], 0x1f, 0x5, 0x4}) (async) r15 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r16, 0x0, 0x0, r17, r18, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r19, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r17, r20, r18, r18, r18], 0x1f, 0x5, 0x4}) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r8}, {0x8, 0x1, r13}, {0x8, 0x1, r15}, {0x8}, {0x8, 0x1, r19}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044011) 04:13:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r4, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r3) (async) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r4, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) [ 2816.976331] FAULT_INJECTION: forcing a failure. [ 2816.976331] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.988498] CPU: 0 PID: 24060 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2816.996390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2817.005746] Call Trace: [ 2817.008340] dump_stack+0x1b2/0x281 [ 2817.011970] should_fail.cold+0x10a/0x149 [ 2817.016120] should_failslab+0xd6/0x130 [ 2817.020098] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2817.025196] __kmalloc_node+0x38/0x70 [ 2817.028991] sbitmap_init_node+0x10c/0x3d0 [ 2817.033226] blk_mq_realloc_hw_ctxs+0x59b/0xe00 [ 2817.037900] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 2817.043006] ? blkcg_init_queue+0x19f/0x410 [ 2817.047326] ? blk_alloc_queue_node+0x82f/0xb40 [ 2817.052002] blk_mq_init_queue+0x5a/0x90 [ 2817.056069] nbd_dev_add+0x2c6/0x800 [ 2817.059782] ? nbd_send_cmd+0x11f0/0x11f0 [ 2817.063924] ? ns_capable_common+0x127/0x150 [ 2817.068327] nbd_genl_connect+0x3a4/0x13e0 [ 2817.072554] ? lock_acquire+0x170/0x3f0 [ 2817.076526] ? nbd_xmit_timeout+0x500/0x500 [ 2817.080842] ? validate_nla+0x192/0x5e0 [ 2817.084813] ? nla_parse+0x157/0x1f0 [ 2817.088527] genl_family_rcv_msg+0x572/0xb20 [ 2817.092931] ? genl_rcv+0x40/0x40 [ 2817.096386] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2817.101838] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2817.106938] ? trace_hardirqs_on+0x10/0x10 [ 2817.111181] genl_rcv_msg+0xaf/0x140 [ 2817.114895] netlink_rcv_skb+0x125/0x390 [ 2817.118953] ? genl_family_rcv_msg+0xb20/0xb20 [ 2817.123534] ? netlink_ack+0x9a0/0x9a0 [ 2817.127421] ? lock_acquire+0x170/0x3f0 [ 2817.131395] genl_rcv+0x24/0x40 [ 2817.134665] netlink_unicast+0x437/0x610 [ 2817.138722] ? netlink_sendskb+0xd0/0xd0 [ 2817.142777] ? __check_object_size+0x179/0x230 [ 2817.147359] netlink_sendmsg+0x648/0xbc0 [ 2817.151422] ? nlmsg_notify+0x1b0/0x1b0 [ 2817.155385] ? kernel_recvmsg+0x210/0x210 [ 2817.159533] ? security_socket_sendmsg+0x83/0xb0 [ 2817.164285] ? nlmsg_notify+0x1b0/0x1b0 [ 2817.168255] sock_sendmsg+0xb5/0x100 [ 2817.171966] ___sys_sendmsg+0x6c8/0x800 [ 2817.175941] ? get_pid_task+0x91/0x130 [ 2817.179953] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2817.184705] ? lock_downgrade+0x740/0x740 [ 2817.188857] ? __fget+0x23e/0x3e0 [ 2817.192306] ? lock_acquire+0x170/0x3f0 [ 2817.196277] ? lock_downgrade+0x740/0x740 [ 2817.200433] ? __fdget+0x19b/0x1f0 [ 2817.203972] ? sockfd_lookup_light+0xb2/0x160 [ 2817.208464] __sys_sendmsg+0xa3/0x120 [ 2817.212257] ? SyS_shutdown+0x160/0x160 [ 2817.216225] ? wait_for_completion_io+0x10/0x10 [ 2817.220896] ? SyS_read+0x210/0x210 [ 2817.224520] SyS_sendmsg+0x27/0x40 [ 2817.228053] ? __sys_sendmsg+0x120/0x120 [ 2817.232105] do_syscall_64+0x1d5/0x640 [ 2817.235996] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2817.241173] RIP: 0033:0x7f56575860a9 [ 2817.244871] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2817.252678] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2817.259949] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2817.267214] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.274476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2817.281748] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 04:13:20 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x100, 0x70bd28}, 0x14}}, 0x0) 04:13:20 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 39) [ 2817.322899] nbd: failed to add new device 04:13:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, r4, 0x0, 0x0, 0x0], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r5, 0x0, 0x0, r6, r7, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r6, r9, r7, r7, r7], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r10, 0x0, 0x0, r11, r12, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r13, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r11, r14, r12, r12, r12], 0x1f, 0x5, 0x4}) (async) r15 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r16, 0x0, 0x0, r17, r18, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r19, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r17, r20, r18, r18, r18], 0x1f, 0x5, 0x4}) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r8}, {0x8, 0x1, r13}, {0x8, 0x1, r15}, {0x8}, {0x8, 0x1, r19}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x24044011) 04:13:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2817.358471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) 04:13:20 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x100, 0x70bd28}, 0x14}}, 0x0) 04:13:20 executing program 3: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:20 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async, rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (rerun: 64) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async, rerun: 64) openat$vnet(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (rerun: 64) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) [ 2817.487947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2817.520682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2817.545441] FAULT_INJECTION: forcing a failure. [ 2817.545441] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.568153] CPU: 0 PID: 24106 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2817.576063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2817.585415] Call Trace: [ 2817.588006] dump_stack+0x1b2/0x281 [ 2817.591638] should_fail.cold+0x10a/0x149 [ 2817.595790] should_failslab+0xd6/0x130 [ 2817.599767] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2817.604430] ? dev_uevent_filter+0xd0/0xd0 [ 2817.608668] kobject_uevent_env+0x20c/0xf30 [ 2817.612992] ? wait_for_completion_io+0x10/0x10 [ 2817.617666] ? is_acpi_device_node+0x5b/0x70 [ 2817.622070] device_del+0x642/0xa80 [ 2817.625699] ? __device_links_no_driver+0x1b0/0x1b0 [ 2817.630712] ? pm_runtime_set_memalloc_noio+0xdc/0x140 [ 2817.636072] del_gendisk+0x65c/0x820 [ 2817.639782] ? refcount_dec_not_one+0x75/0xc0 [ 2817.644274] ? disk_events_poll_msecs_store+0x150/0x150 [ 2817.649638] ? wait_for_completion_io+0x10/0x10 [ 2817.654309] nbd_put.part.0+0xb0/0x140 [ 2817.658189] nbd_genl_connect+0xcf6/0x13e0 [ 2817.662420] ? nbd_xmit_timeout+0x500/0x500 [ 2817.666739] ? validate_nla+0x192/0x5e0 [ 2817.670717] genl_family_rcv_msg+0x572/0xb20 [ 2817.675133] ? genl_rcv+0x40/0x40 [ 2817.678583] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2817.684138] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2817.689238] ? trace_hardirqs_on+0x10/0x10 [ 2817.693482] genl_rcv_msg+0xaf/0x140 [ 2817.697196] netlink_rcv_skb+0x125/0x390 [ 2817.701259] ? genl_family_rcv_msg+0xb20/0xb20 [ 2817.705834] ? netlink_ack+0x9a0/0x9a0 [ 2817.709722] ? lock_acquire+0x170/0x3f0 [ 2817.713704] genl_rcv+0x24/0x40 [ 2817.716984] netlink_unicast+0x437/0x610 [ 2817.721037] ? netlink_sendskb+0xd0/0xd0 [ 2817.725097] ? __check_object_size+0x179/0x230 [ 2817.729679] netlink_sendmsg+0x648/0xbc0 [ 2817.733737] ? nlmsg_notify+0x1b0/0x1b0 [ 2817.737713] ? kernel_recvmsg+0x210/0x210 [ 2817.741858] ? security_socket_sendmsg+0x83/0xb0 [ 2817.746694] ? nlmsg_notify+0x1b0/0x1b0 [ 2817.750663] sock_sendmsg+0xb5/0x100 [ 2817.754381] ___sys_sendmsg+0x6c8/0x800 [ 2817.758347] ? get_pid_task+0x91/0x130 [ 2817.762227] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2817.766982] ? lock_downgrade+0x740/0x740 [ 2817.771132] ? __fget+0x23e/0x3e0 [ 2817.774584] ? lock_acquire+0x170/0x3f0 [ 2817.778557] ? lock_downgrade+0x740/0x740 [ 2817.782706] ? __fdget+0x19b/0x1f0 [ 2817.786240] ? sockfd_lookup_light+0xb2/0x160 [ 2817.790733] __sys_sendmsg+0xa3/0x120 [ 2817.794530] ? SyS_shutdown+0x160/0x160 [ 2817.798502] ? wait_for_completion_io+0x10/0x10 [ 2817.803254] ? SyS_read+0x210/0x210 [ 2817.806874] SyS_sendmsg+0x27/0x40 [ 2817.810406] ? __sys_sendmsg+0x120/0x120 [ 2817.814461] do_syscall_64+0x1d5/0x640 [ 2817.818349] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2817.823527] RIP: 0033:0x7f56575860a9 [ 2817.827228] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2817.834935] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2817.842198] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2817.849458] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.856722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2817.863986] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) 04:13:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) 04:13:21 executing program 3: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000004) 04:13:21 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 40) 04:13:21 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8000000023c98a20527027f10481fe35e2263e5912a1a7a4a2af2d67515489acdcc747e36a83f2ea9cc857cc6b875561be551d96efd4aeb4cc6cddc93dbba8f79865440ccb8b6c29e4fb9400dae0a307985ea0cae160bd2e2bc79b1cdc178bae2494976abd4238240e4df681f3a72a92482b65b386ddd883673e72dcf607e7cf50a344ffb09b7331885613ab9b43f569f9f201416db8627b807159126c58ab", @ANYRES16=r4, @ANYBLOB="000827bd7000ffdbdf25010000000c00020000020000000000000c00060001000000000000000c00030000000000808902000c00050002000000000000000c00030006000000000000000c00050008000000000000000c00060001000000000000000c00060000000000000000000c0006000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)={0x104, r6, 0x1, 0xf0bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8a, 0xa, '.*$^$+y+\xc2C>&\x84\x14B\x1d\x80D\xdf6TX*K\xbc?\x88\xa5\x8a\xc3~\xd2\xc0\x83\xe9\x17}\xc5\xce\xa4\x0f\x1f\'k\xdfU\xf1\xb9{\x1f\xf0\xdc\xb2\x11N\a9\x91\xb7x\x83\xec\xe3\xed\xa1\xdf\xed=\xef\xf7Tkv\x8e\x94\xe3%]tLZ\xecP3\x8e\x9f?\xa1)7 \x18WW\x8e\xfd\x8d8\x80U\xfd[\xfd+[\xd9O^\xd3A\x8c\x0f\xf5\xdd=\x0fA\x03\a\xd9\xedA\xff\a\x00\x00\x00\x00\x00\x00\x94\x86\xb4D'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, r1, 0x5943c122d2ddf094, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6b2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 04:13:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, r1, 0x5943c122d2ddf094, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6b2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, r1, 0x5943c122d2ddf094, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6b2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) 04:13:21 executing program 3: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) [ 2818.034859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2818.048060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 04:13:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) (async) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000004) (async) 04:13:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async) [ 2818.077080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2818.096815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:21 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8000000023c98a20527027f10481fe35e2263e5912a1a7a4a2af2d67515489acdcc747e36a83f2ea9cc857cc6b875561be551d96efd4aeb4cc6cddc93dbba8f79865440ccb8b6c29e4fb9400dae0a307985ea0cae160bd2e2bc79b1cdc178bae2494976abd4238240e4df681f3a72a92482b65b386ddd883673e72dcf607e7cf50a344ffb09b7331885613ab9b43f569f9f201416db8627b807159126c58ab", @ANYRES16=r4, @ANYBLOB="000827bd7000ffdbdf25010000000c00020000020000000000000c00060001000000000000000c00030000000000808902000c00050002000000000000000c00030006000000000000000c00050008000000000000000c00060001000000000000000c00060000000000000000000c0006000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)={0x104, r6, 0x1, 0xf0bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8a, 0xa, '.*$^$+y+\xc2C>&\x84\x14B\x1d\x80D\xdf6TX*K\xbc?\x88\xa5\x8a\xc3~\xd2\xc0\x83\xe9\x17}\xc5\xce\xa4\x0f\x1f\'k\xdfU\xf1\xb9{\x1f\xf0\xdc\xb2\x11N\a9\x91\xb7x\x83\xec\xe3\xed\xa1\xdf\xed=\xef\xf7Tkv\x8e\x94\xe3%]tLZ\xecP3\x8e\x9f?\xa1)7 \x18WW\x8e\xfd\x8d8\x80U\xfd[\xfd+[\xd9O^\xd3A\x8c\x0f\xf5\xdd=\x0fA\x03\a\xd9\xedA\xff\a\x00\x00\x00\x00\x00\x00\x94\x86\xb4D'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8000000023c98a20527027f10481fe35e2263e5912a1a7a4a2af2d67515489acdcc747e36a83f2ea9cc857cc6b875561be551d96efd4aeb4cc6cddc93dbba8f79865440ccb8b6c29e4fb9400dae0a307985ea0cae160bd2e2bc79b1cdc178bae2494976abd4238240e4df681f3a72a92482b65b386ddd883673e72dcf607e7cf50a344ffb09b7331885613ab9b43f569f9f201416db8627b807159126c58ab", @ANYRES16=r4, @ANYBLOB="000827bd7000ffdbdf25010000000c00020000020000000000000c00060001000000000000000c00030000000000808902000c00050002000000000000000c00030006000000000000000c00050008000000000000000c00060001000000000000000c00060000000000000000000c0006000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)={0x104, r6, 0x1, 0xf0bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8a, 0xa, '.*$^$+y+\xc2C>&\x84\x14B\x1d\x80D\xdf6TX*K\xbc?\x88\xa5\x8a\xc3~\xd2\xc0\x83\xe9\x17}\xc5\xce\xa4\x0f\x1f\'k\xdfU\xf1\xb9{\x1f\xf0\xdc\xb2\x11N\a9\x91\xb7x\x83\xec\xe3\xed\xa1\xdf\xed=\xef\xf7Tkv\x8e\x94\xe3%]tLZ\xecP3\x8e\x9f?\xa1)7 \x18WW\x8e\xfd\x8d8\x80U\xfd[\xfd+[\xd9O^\xd3A\x8c\x0f\xf5\xdd=\x0fA\x03\a\xd9\xedA\xff\a\x00\x00\x00\x00\x00\x00\x94\x86\xb4D'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) [ 2818.164033] FAULT_INJECTION: forcing a failure. [ 2818.164033] name failslab, interval 1, probability 0, space 0, times 0 [ 2818.188965] CPU: 1 PID: 24165 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2818.196875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2818.206221] Call Trace: [ 2818.208887] dump_stack+0x1b2/0x281 [ 2818.212537] should_fail.cold+0x10a/0x149 [ 2818.216666] should_failslab+0xd6/0x130 [ 2818.220624] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2818.225707] __kmalloc_node+0x38/0x70 [ 2818.229493] sbitmap_init_node+0x10c/0x3d0 [ 2818.233800] blk_mq_realloc_hw_ctxs+0x59b/0xe00 [ 2818.238462] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 2818.243572] ? blkcg_init_queue+0x19f/0x410 [ 2818.247875] ? blk_alloc_queue_node+0x82f/0xb40 [ 2818.252538] blk_mq_init_queue+0x5a/0x90 [ 2818.256592] nbd_dev_add+0x2c6/0x800 [ 2818.260285] ? nbd_send_cmd+0x11f0/0x11f0 [ 2818.264423] ? ns_capable_common+0x127/0x150 [ 2818.268833] nbd_genl_connect+0x3a4/0x13e0 [ 2818.273071] ? nbd_xmit_timeout+0x500/0x500 [ 2818.277383] ? __mutex_lock+0x356/0x1310 [ 2818.281440] ? validate_nla+0x192/0x5e0 [ 2818.285413] ? nla_parse+0x157/0x1f0 [ 2818.289126] genl_family_rcv_msg+0x572/0xb20 [ 2818.293534] ? genl_rcv+0x40/0x40 [ 2818.297081] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2818.302531] ? trace_hardirqs_on+0x10/0x10 [ 2818.306768] genl_rcv_msg+0xaf/0x140 [ 2818.310476] netlink_rcv_skb+0x125/0x390 [ 2818.314539] ? genl_family_rcv_msg+0xb20/0xb20 [ 2818.319116] ? netlink_ack+0x9a0/0x9a0 [ 2818.322998] ? lock_acquire+0x170/0x3f0 [ 2818.326977] genl_rcv+0x24/0x40 [ 2818.330255] netlink_unicast+0x437/0x610 [ 2818.334315] ? netlink_sendskb+0xd0/0xd0 [ 2818.338374] ? __check_object_size+0x179/0x230 [ 2818.342955] netlink_sendmsg+0x648/0xbc0 [ 2818.347011] ? nlmsg_notify+0x1b0/0x1b0 [ 2818.350976] ? kernel_recvmsg+0x210/0x210 [ 2818.355123] ? security_socket_sendmsg+0x83/0xb0 [ 2818.359875] ? nlmsg_notify+0x1b0/0x1b0 [ 2818.363851] sock_sendmsg+0xb5/0x100 [ 2818.367570] ___sys_sendmsg+0x6c8/0x800 [ 2818.371544] ? get_pid_task+0x91/0x130 [ 2818.375426] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2818.380181] ? lock_downgrade+0x740/0x740 [ 2818.384330] ? __fget+0x23e/0x3e0 [ 2818.387790] ? lock_acquire+0x170/0x3f0 [ 2818.391761] ? lock_downgrade+0x740/0x740 [ 2818.395920] ? __fdget+0x19b/0x1f0 [ 2818.399458] ? sockfd_lookup_light+0xb2/0x160 [ 2818.403949] __sys_sendmsg+0xa3/0x120 [ 2818.407748] ? SyS_shutdown+0x160/0x160 [ 2818.411714] ? wait_for_completion_io+0x10/0x10 [ 2818.416386] ? SyS_read+0x210/0x210 [ 2818.420006] SyS_sendmsg+0x27/0x40 [ 2818.423539] ? __sys_sendmsg+0x120/0x120 [ 2818.427596] do_syscall_64+0x1d5/0x640 [ 2818.431482] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2818.436836] RIP: 0033:0x7f56575860a9 [ 2818.440538] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2818.448241] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2818.455511] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 04:13:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="120000100f1bff50c0d02c809d1753f8dc680f8a9f30d011286312203f889854022d8ecc4000000000000000beb0446fd6ab47ee29119e083aebda284b74abd21d32bb0b66c2704ee5434c145fdf1a002870bfc936b607e25ce8f91ea47d8a4da2f652baf4c7fe75bd5dad27b7b3b9fdf4deff69210fc5a4000000a5dfd37d71d919bf6c7b4e1806caaee93dd33a1a7d58b0d490fd36e1ded98a297c488a84a1cc575dd2315f891c7db21e43f22b33d2491bc3c831d74332420000fbf7986c3e6c280caa4c9e899a68207e7b38548cf987892cce679bf69629ab09d2a55fd433d12df26783a48b1a49816bf3bba82632eaa3759b377e48d3b4fc6015cad8c2de48b7295b9b536da6349ec7d0a487d434f6217d747ff5253a8d65052f2c45eadf52e0ba454b81de70acf953a3dc82ce810bb870d2026a04ec85898859b4df998136bcec89efac62e79248964409cd4c2f16eb36571b2ab0b2f18116b954237d88d0b9673db36c6acf74026f43a42a48cc7941ad0c937340714183f8bc71b27783bcfdf1a44095b0dd02ef94ad0255b75f29269ff379d2ac47d6a6f5a1cfe43c08fe895209326ba591b8582d2dc989d4ee7a8bdb2024b79b9667f58f591d47742379bfcb3fc5288e8ac800000000009795427651e18294de1dd54c3e3546ecd04e14f10e8d7b9cb734213fa8fd1172a7622469d91607d2979e2cd95aeae2480746c5ad82becf26eae380b53695710391995614364ee94669e313be17b450e3c1923f1d6744bc10880e6a6b4238f6f0b30b56c91289067dbeb083b7db62d324", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:21 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8000000023c98a20527027f10481fe35e2263e5912a1a7a4a2af2d67515489acdcc747e36a83f2ea9cc857cc6b875561be551d96efd4aeb4cc6cddc93dbba8f79865440ccb8b6c29e4fb9400dae0a307985ea0cae160bd2e2bc79b1cdc178bae2494976abd4238240e4df681f3a72a92482b65b386ddd883673e72dcf607e7cf50a344ffb09b7331885613ab9b43f569f9f201416db8627b807159126c58ab", @ANYRES16=r4, @ANYBLOB="000827bd7000ffdbdf25010000000c00020000020000000000000c00060001000000000000000c00030000000000808902000c00050002000000000000000c00030006000000000000000c00050008000000000000000c00060001000000000000000c00060000000000000000000c0006000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)={0x104, r6, 0x1, 0xf0bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8a, 0xa, '.*$^$+y+\xc2C>&\x84\x14B\x1d\x80D\xdf6TX*K\xbc?\x88\xa5\x8a\xc3~\xd2\xc0\x83\xe9\x17}\xc5\xce\xa4\x0f\x1f\'k\xdfU\xf1\xb9{\x1f\xf0\xdc\xb2\x11N\a9\x91\xb7x\x83\xec\xe3\xed\xa1\xdf\xed=\xef\xf7Tkv\x8e\x94\xe3%]tLZ\xecP3\x8e\x9f?\xa1)7 \x18WW\x8e\xfd\x8d8\x80U\xfd[\xfd+[\xd9O^\xd3A\x8c\x0f\xf5\xdd=\x0fA\x03\a\xd9\xedA\xff\a\x00\x00\x00\x00\x00\x00\x94\x86\xb4D'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) (async) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000004) (async) 04:13:21 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 41) 04:13:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8880}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x20000001) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0xcc, r10, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:userio_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0xcc}}, 0x8000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRES8=r8], 0x4c}}, 0x0) [ 2818.462775] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2818.470043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2818.477309] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2818.492719] nbd: failed to add new device 04:13:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, r1, 0x5943c122d2ddf094, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6b2}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 04:13:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) [ 2818.605206] FAULT_INJECTION: forcing a failure. [ 2818.605206] name failslab, interval 1, probability 0, space 0, times 0 [ 2818.631852] CPU: 1 PID: 24251 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2818.639841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2818.649190] Call Trace: [ 2818.651777] dump_stack+0x1b2/0x281 [ 2818.655405] should_fail.cold+0x10a/0x149 [ 2818.659559] should_failslab+0xd6/0x130 [ 2818.663553] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2818.668656] blk_mq_init_tags+0x5e/0x280 [ 2818.672715] blk_mq_alloc_rq_map+0x90/0x220 [ 2818.677040] blk_mq_sched_alloc_tags+0xaa/0x240 [ 2818.681703] blk_mq_init_sched+0x18d/0x4a0 [ 2818.685933] ? _raw_spin_unlock+0x29/0x40 [ 2818.690079] elevator_init+0x2ee/0x410 [ 2818.693966] blk_mq_sched_init+0x28/0x40 [ 2818.698035] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2818.703141] blk_mq_init_queue+0x5a/0x90 [ 2818.707198] nbd_dev_add+0x2c6/0x800 [ 2818.710906] ? nbd_send_cmd+0x11f0/0x11f0 [ 2818.715049] ? ns_capable_common+0x127/0x150 [ 2818.719461] nbd_genl_connect+0x3a4/0x13e0 [ 2818.723687] ? lock_acquire+0x170/0x3f0 [ 2818.727657] ? nbd_xmit_timeout+0x500/0x500 [ 2818.731976] ? validate_nla+0x192/0x5e0 [ 2818.735944] ? nla_parse+0x157/0x1f0 [ 2818.739653] genl_family_rcv_msg+0x572/0xb20 [ 2818.744055] ? genl_rcv+0x40/0x40 [ 2818.747502] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2818.752946] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2818.758050] ? trace_hardirqs_on+0x10/0x10 [ 2818.762287] genl_rcv_msg+0xaf/0x140 [ 2818.765997] netlink_rcv_skb+0x125/0x390 [ 2818.770147] ? genl_family_rcv_msg+0xb20/0xb20 [ 2818.774722] ? netlink_ack+0x9a0/0x9a0 [ 2818.778604] ? lock_acquire+0x170/0x3f0 [ 2818.782581] genl_rcv+0x24/0x40 [ 2818.785852] netlink_unicast+0x437/0x610 [ 2818.789910] ? netlink_sendskb+0xd0/0xd0 [ 2818.793962] ? __check_object_size+0x179/0x230 [ 2818.798541] netlink_sendmsg+0x648/0xbc0 [ 2818.802603] ? nlmsg_notify+0x1b0/0x1b0 [ 2818.806568] ? kernel_recvmsg+0x210/0x210 [ 2818.810711] ? security_socket_sendmsg+0x83/0xb0 [ 2818.815476] ? nlmsg_notify+0x1b0/0x1b0 [ 2818.819447] sock_sendmsg+0xb5/0x100 [ 2818.823154] ___sys_sendmsg+0x6c8/0x800 [ 2818.827120] ? get_pid_task+0x91/0x130 [ 2818.831001] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2818.835764] ? lock_downgrade+0x740/0x740 [ 2818.839912] ? __fget+0x23e/0x3e0 [ 2818.843366] ? lock_acquire+0x170/0x3f0 [ 2818.847338] ? lock_downgrade+0x740/0x740 [ 2818.851494] ? __fdget+0x19b/0x1f0 [ 2818.855031] ? sockfd_lookup_light+0xb2/0x160 [ 2818.859521] __sys_sendmsg+0xa3/0x120 [ 2818.863317] ? SyS_shutdown+0x160/0x160 [ 2818.867290] ? wait_for_completion_io+0x10/0x10 [ 2818.871958] ? SyS_read+0x210/0x210 [ 2818.875579] SyS_sendmsg+0x27/0x40 [ 2818.879112] ? __sys_sendmsg+0x120/0x120 [ 2818.883168] do_syscall_64+0x1d5/0x640 [ 2818.887058] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2818.892841] RIP: 0033:0x7f56575860a9 [ 2818.896634] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 04:13:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20040081) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x30b}, 0x14}}, 0x0) [ 2818.904332] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2818.911595] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2818.918945] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2818.926296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2818.933563] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2818.951598] nbd: failed to add new device 04:13:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fedbdf250400000014000600626f6e645f73536176655f30000000002900070073797374656d5f753a6f626a6563745f723a6c64636f6e6669675f657865635f743a7330000000001400060076657468315f6d616376746170000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r1, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010000000000000000000500000089de0954495226bcd1b2948cb401b06ed7268579426a3a871b2302e451f87bfe"], 0x14}}, 0x0) 04:13:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) 04:13:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8880}, 0x40) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x20000001) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r10, 0x1}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0xcc, r10, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:userio_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0xcc}}, 0x8000000) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r8) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRES8=r8], 0x4c}}, 0x0) 04:13:22 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 42) [ 2818.999382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fedbdf250400000014000600626f6e645f73536176655f30000000002900070073797374656d5f753a6f626a6563745f723a6c64636f6e6669675f657865635f743a7330000000001400060076657468315f6d616376746170000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r1, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4010) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010000000000000000000500000089de0954495226bcd1b2948cb401b06ed7268579426a3a871b2302e451f87bfe"], 0x14}}, 0x0) 04:13:22 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10008040}, 0x2000c000) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="16002dbd7000fedbdf2503000000a5c22ab36778d7ea248fa3bd35052b8f72c906d8ed19d0ae27ffa0ea746804906cb163a06a6736b5dd12907c47a53fca27b1e4737e6fb1ed42da737bb51a0fa970b9f37ad5224d82017f84acc00a905f34d18a39024876c952bcb67c61bcf103ff300159"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000840)={&(0x7f0000ffc000/0x4000)=nil, 0x9, 0x0, 0x40}) 04:13:22 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000280)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r1, r5, r2, r2, r2], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r6, 0x0, 0x0, r7, r8, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r7, r10, r8, r8, r8], 0x1f, 0x5, 0x4}) r11 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x4080) ioctl$DRM_IOCTL_MODE_GET_LEASE(r11, 0xc01064c8, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, r8, 0x0, 0x0], 0x4}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r12) sendmsg$NBD_CMD_STATUS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r13, @ANYBLOB="01"], 0x14}}, 0x0) [ 2819.090564] FAULT_INJECTION: forcing a failure. [ 2819.090564] name failslab, interval 1, probability 0, space 0, times 0 [ 2819.128962] CPU: 1 PID: 24293 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2819.136958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2819.146307] Call Trace: [ 2819.148904] dump_stack+0x1b2/0x281 [ 2819.152534] should_fail.cold+0x10a/0x149 [ 2819.156679] should_failslab+0xd6/0x130 [ 2819.160655] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2819.165764] __kmalloc_node+0x38/0x70 [ 2819.169563] blk_alloc_flush_queue+0xf7/0x2b0 [ 2819.174060] blk_mq_realloc_hw_ctxs+0x6ab/0xe00 [ 2819.178734] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 2819.183837] ? blkcg_init_queue+0x19f/0x410 [ 2819.188154] ? blk_alloc_queue_node+0x82f/0xb40 [ 2819.192824] blk_mq_init_queue+0x5a/0x90 [ 2819.196888] nbd_dev_add+0x2c6/0x800 [ 2819.200597] ? nbd_send_cmd+0x11f0/0x11f0 [ 2819.204739] ? ns_capable_common+0x127/0x150 [ 2819.209145] nbd_genl_connect+0x3a4/0x13e0 [ 2819.213373] ? lock_acquire+0x170/0x3f0 [ 2819.217339] ? nbd_xmit_timeout+0x500/0x500 [ 2819.221652] ? validate_nla+0x192/0x5e0 [ 2819.225628] ? nla_parse+0x157/0x1f0 [ 2819.229339] genl_family_rcv_msg+0x572/0xb20 [ 2819.233744] ? genl_rcv+0x40/0x40 [ 2819.237196] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2819.242638] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2819.247771] ? trace_hardirqs_on+0x10/0x10 [ 2819.252017] genl_rcv_msg+0xaf/0x140 [ 2819.255730] netlink_rcv_skb+0x125/0x390 [ 2819.259794] ? genl_family_rcv_msg+0xb20/0xb20 [ 2819.264367] ? netlink_ack+0x9a0/0x9a0 [ 2819.268245] ? lock_acquire+0x170/0x3f0 [ 2819.272238] genl_rcv+0x24/0x40 [ 2819.275510] netlink_unicast+0x437/0x610 [ 2819.279563] ? netlink_sendskb+0xd0/0xd0 [ 2819.283615] ? __check_object_size+0x179/0x230 [ 2819.288191] netlink_sendmsg+0x648/0xbc0 [ 2819.292245] ? nlmsg_notify+0x1b0/0x1b0 [ 2819.296210] ? kernel_recvmsg+0x210/0x210 [ 2819.300350] ? security_socket_sendmsg+0x83/0xb0 [ 2819.305102] ? nlmsg_notify+0x1b0/0x1b0 [ 2819.309071] sock_sendmsg+0xb5/0x100 [ 2819.312777] ___sys_sendmsg+0x6c8/0x800 [ 2819.316745] ? get_pid_task+0x91/0x130 [ 2819.320627] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2819.325380] ? lock_downgrade+0x740/0x740 [ 2819.329529] ? __fget+0x23e/0x3e0 [ 2819.332977] ? lock_acquire+0x170/0x3f0 [ 2819.337034] ? lock_downgrade+0x740/0x740 [ 2819.341275] ? __fdget+0x19b/0x1f0 [ 2819.344809] ? sockfd_lookup_light+0xb2/0x160 [ 2819.349295] __sys_sendmsg+0xa3/0x120 [ 2819.353090] ? SyS_shutdown+0x160/0x160 [ 2819.357055] ? wait_for_completion_io+0x10/0x10 [ 2819.361724] ? SyS_read+0x210/0x210 [ 2819.365343] SyS_sendmsg+0x27/0x40 [ 2819.368872] ? __sys_sendmsg+0x120/0x120 [ 2819.372923] do_syscall_64+0x1d5/0x640 [ 2819.376808] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2819.381997] RIP: 0033:0x7f56575860a9 [ 2819.385698] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2819.393396] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2819.400658] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2819.407923] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2819.415195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2819.422461] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:22 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 43) 04:13:22 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10008040}, 0x2000c000) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) (async, rerun: 32) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="16002dbd7000fedbdf2503000000a5c22ab36778d7ea248fa3bd35052b8f72c906d8ed19d0ae27ffa0ea746804906cb163a06a6736b5dd12907c47a53fca27b1e4737e6fb1ed42da737bb51a0fa970b9f37ad5224d82017f84acc00a905f34d18a39024876c952bcb67c61bcf103ff300159"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000840)={&(0x7f0000ffc000/0x4000)=nil, 0x9, 0x0, 0x40}) (rerun: 64) 04:13:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fedbdf250400000014000600626f6e645f73536176655f30000000002900070073797374656d5f753a6f626a6563745f723a6c64636f6e6669675f657865635f743a7330000000001400060076657468315f6d616376746170000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r1, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010000000000000000000500000089de0954495226bcd1b2948cb401b06ed7268579426a3a871b2302e451f87bfe"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fedbdf250400000014000600626f6e645f73536176655f30000000002900070073797374656d5f753a6f626a6563745f723a6c64636f6e6669675f657865635f743a7330000000001400060076657468315f6d616376746170000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r1, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4010) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010000000000000000000500000089de0954495226bcd1b2948cb401b06ed7268579426a3a871b2302e451f87bfe"], 0x14}}, 0x0) (async) 04:13:22 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000280)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r1, r5, r2, r2, r2], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r6, 0x0, 0x0, r7, r8, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r7, r10, r8, r8, r8], 0x1f, 0x5, 0x4}) (async) r11 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x4080) ioctl$DRM_IOCTL_MODE_GET_LEASE(r11, 0xc01064c8, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, r8, 0x0, 0x0], 0x4}) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r12) sendmsg$NBD_CMD_STATUS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r13, @ANYBLOB="01"], 0x14}}, 0x0) [ 2819.466909] nbd: failed to add new device 04:13:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20040081) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x30b}, 0x14}}, 0x0) 04:13:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8880}, 0x40) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r9) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r11, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x20000001) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r10, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0xcc, r10, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:userio_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0xcc}}, 0x8000000) (async, rerun: 32) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r8) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRES8=r8], 0x4c}}, 0x0) 04:13:23 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000280)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r4, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r1, r5, r2, r2, r2], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r6, 0x0, 0x0, r7, r8, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r7, r10, r8, r8, r8], 0x1f, 0x5, 0x4}) (async) r11 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x4080) ioctl$DRM_IOCTL_MODE_GET_LEASE(r11, 0xc01064c8, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r4, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, r8, 0x0, 0x0], 0x4}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r12) sendmsg$NBD_CMD_STATUS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r13, @ANYBLOB="01"], 0x14}}, 0x0) [ 2819.566714] FAULT_INJECTION: forcing a failure. [ 2819.566714] name failslab, interval 1, probability 0, space 0, times 0 [ 2819.587343] CPU: 0 PID: 24337 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2819.595248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2819.604594] Call Trace: [ 2819.607178] dump_stack+0x1b2/0x281 [ 2819.610804] should_fail.cold+0x10a/0x149 [ 2819.614951] should_failslab+0xd6/0x130 [ 2819.618929] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2819.624032] sbitmap_queue_init_node+0x27f/0x5d0 [ 2819.628788] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2819.634064] blk_mq_init_tags+0xf4/0x280 [ 2819.638127] blk_mq_alloc_rq_map+0x90/0x220 [ 2819.642450] blk_mq_sched_alloc_tags+0xaa/0x240 [ 2819.647124] blk_mq_init_sched+0x18d/0x4a0 [ 2819.651355] ? _raw_spin_unlock+0x29/0x40 [ 2819.655503] elevator_init+0x2ee/0x410 [ 2819.659508] blk_mq_sched_init+0x28/0x40 [ 2819.663567] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2819.668672] blk_mq_init_queue+0x5a/0x90 [ 2819.672729] nbd_dev_add+0x2c6/0x800 [ 2819.676439] ? nbd_send_cmd+0x11f0/0x11f0 [ 2819.680584] ? ns_capable_common+0x127/0x150 [ 2819.684990] nbd_genl_connect+0x3a4/0x13e0 [ 2819.689215] ? lock_acquire+0x170/0x3f0 [ 2819.693183] ? nbd_xmit_timeout+0x500/0x500 [ 2819.697502] ? validate_nla+0x192/0x5e0 [ 2819.701470] ? nla_parse+0x157/0x1f0 [ 2819.705184] genl_family_rcv_msg+0x572/0xb20 [ 2819.709588] ? genl_rcv+0x40/0x40 [ 2819.713040] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2819.718485] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2819.723711] ? trace_hardirqs_on+0x10/0x10 [ 2819.727948] genl_rcv_msg+0xaf/0x140 [ 2819.731659] netlink_rcv_skb+0x125/0x390 [ 2819.735715] ? genl_family_rcv_msg+0xb20/0xb20 [ 2819.740288] ? netlink_ack+0x9a0/0x9a0 [ 2819.744172] ? lock_acquire+0x170/0x3f0 [ 2819.748145] genl_rcv+0x24/0x40 [ 2819.751423] netlink_unicast+0x437/0x610 [ 2819.755492] ? netlink_sendskb+0xd0/0xd0 [ 2819.759547] ? __check_object_size+0x179/0x230 [ 2819.764122] netlink_sendmsg+0x648/0xbc0 [ 2819.768179] ? nlmsg_notify+0x1b0/0x1b0 [ 2819.772145] ? kernel_recvmsg+0x210/0x210 [ 2819.776286] ? security_socket_sendmsg+0x83/0xb0 [ 2819.781031] ? nlmsg_notify+0x1b0/0x1b0 [ 2819.784994] sock_sendmsg+0xb5/0x100 [ 2819.788697] ___sys_sendmsg+0x6c8/0x800 [ 2819.792669] ? get_pid_task+0x91/0x130 [ 2819.796557] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2819.801309] ? lock_downgrade+0x740/0x740 [ 2819.805450] ? __fget+0x23e/0x3e0 [ 2819.808911] ? lock_acquire+0x170/0x3f0 [ 2819.812888] ? lock_downgrade+0x740/0x740 [ 2819.817035] ? __fdget+0x19b/0x1f0 [ 2819.820566] ? sockfd_lookup_light+0xb2/0x160 [ 2819.825055] __sys_sendmsg+0xa3/0x120 [ 2819.828847] ? SyS_shutdown+0x160/0x160 [ 2819.832816] ? wait_for_completion_io+0x10/0x10 [ 2819.837481] ? SyS_read+0x210/0x210 [ 2819.841100] SyS_sendmsg+0x27/0x40 [ 2819.844629] ? __sys_sendmsg+0x120/0x120 [ 2819.848685] do_syscall_64+0x1d5/0x640 [ 2819.852568] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2819.857746] RIP: 0033:0x7f56575860a9 [ 2819.861445] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2819.869145] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2819.876405] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2819.883662] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2819.890922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2819.898182] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) [ 2819.916455] nbd: failed to add new device 04:13:23 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 44) 04:13:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20040081) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x30b}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20040081) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x30b}, 0x14}}, 0x0) (async) 04:13:23 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000040c73c177be8958"], 0x14}}, 0x0) 04:13:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002c14925c2f7a65eb4c1f166eabf77489dd61c7d1035f3e281ae01f4fbed4ce2c1835c9fa68daa74dcdfa8961ccf22f730edb79a51f64d24f7fb6afefe3cd1b4d5e83bd60967dca3bf1f17678d4fbdc9456d6a3e03bd4d5a39cc1cafb0b1f1a1dd249336801c235ff6839eab67d5870bc94a6a7b975cb39bb8617f74bd7fb9deed37c85c949c506c6b3a75f9abdd5481980d00ca4c10ea9d6e51"], 0x4c}}, 0x0) 04:13:23 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10008040}, 0x2000c000) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="16002dbd7000fedbdf2503000000a5c22ab36778d7ea248fa3bd35052b8f72c906d8ed19d0ae27ffa0ea746804906cb163a06a6736b5dd12907c47a53fca27b1e4737e6fb1ed42da737bb51a0fa970b9f37ad5224d82017f84acc00a905f34d18a39024876c952bcb67c61bcf103ff300159"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000840)={&(0x7f0000ffc000/0x4000)=nil, 0x9, 0x0, 0x40}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10008040}, 0x2000c000) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="16002dbd7000fedbdf2503000000a5c22ab36778d7ea248fa3bd35052b8f72c906d8ed19d0ae27ffa0ea746804906cb163a06a6736b5dd12907c47a53fca27b1e4737e6fb1ed42da737bb51a0fa970b9f37ad5224d82017f84acc00a905f34d18a39024876c952bcb67c61bcf103ff300159"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000840)={&(0x7f0000ffc000/0x4000)=nil, 0x9, 0x0, 0x40}) (async) 04:13:23 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000040c73c177be8958"], 0x14}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000040c73c177be8958"], 0x14}}, 0x0) (async) 04:13:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002c14925c2f7a65eb4c1f166eabf77489dd61c7d1035f3e281ae01f4fbed4ce2c1835c9fa68daa74dcdfa8961ccf22f730edb79a51f64d24f7fb6afefe3cd1b4d5e83bd60967dca3bf1f17678d4fbdc9456d6a3e03bd4d5a39cc1cafb0b1f1a1dd249336801c235ff6839eab67d5870bc94a6a7b975cb39bb8617f74bd7fb9deed37c85c949c506c6b3a75f9abdd5481980d00ca4c10ea9d6e51"], 0x4c}}, 0x0) 04:13:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (rerun: 64) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) [ 2820.093747] FAULT_INJECTION: forcing a failure. [ 2820.093747] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.122844] CPU: 1 PID: 24387 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2820.130747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2820.140106] Call Trace: 04:13:23 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00007311592e2b04c641f8516800a1870153f17663c92ed20d37fca3793a93ae34583cadf7f90e72b82da59a788e1336b041b993e602bb817a61a460519bc66bc8f37925a6406a979b360b0f6ca5a755e5c03837531b8c90982f1967b30000003a4a00"/116, @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000a6cd", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2820.142703] dump_stack+0x1b2/0x281 [ 2820.146333] should_fail.cold+0x10a/0x149 [ 2820.150479] should_failslab+0xd6/0x130 [ 2820.154451] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2820.159565] sbitmap_queue_init_node+0x27f/0x5d0 [ 2820.164336] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 2820.169609] blk_mq_init_tags+0x14b/0x280 [ 2820.173751] blk_mq_alloc_rq_map+0x90/0x220 [ 2820.178075] blk_mq_sched_alloc_tags+0xaa/0x240 [ 2820.182746] blk_mq_init_sched+0x18d/0x4a0 [ 2820.186980] ? _raw_spin_unlock+0x29/0x40 [ 2820.191128] elevator_init+0x2ee/0x410 [ 2820.195012] blk_mq_sched_init+0x28/0x40 [ 2820.199069] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2820.204168] blk_mq_init_queue+0x5a/0x90 [ 2820.208228] nbd_dev_add+0x2c6/0x800 [ 2820.211938] ? nbd_send_cmd+0x11f0/0x11f0 [ 2820.216082] ? ns_capable_common+0x127/0x150 [ 2820.220491] nbd_genl_connect+0x3a4/0x13e0 [ 2820.224723] ? lock_acquire+0x170/0x3f0 [ 2820.228691] ? nbd_xmit_timeout+0x500/0x500 [ 2820.233007] ? validate_nla+0x192/0x5e0 [ 2820.236982] ? nla_parse+0x157/0x1f0 [ 2820.240697] genl_family_rcv_msg+0x572/0xb20 [ 2820.245113] ? genl_rcv+0x40/0x40 [ 2820.248564] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2820.254010] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2820.259108] ? trace_hardirqs_on+0x10/0x10 [ 2820.263340] genl_rcv_msg+0xaf/0x140 [ 2820.267132] netlink_rcv_skb+0x125/0x390 [ 2820.271185] ? genl_family_rcv_msg+0xb20/0xb20 [ 2820.275762] ? netlink_ack+0x9a0/0x9a0 [ 2820.279640] ? lock_acquire+0x170/0x3f0 [ 2820.283607] genl_rcv+0x24/0x40 [ 2820.286889] netlink_unicast+0x437/0x610 [ 2820.290941] ? netlink_sendskb+0xd0/0xd0 [ 2820.294994] ? __check_object_size+0x179/0x230 [ 2820.299571] netlink_sendmsg+0x648/0xbc0 [ 2820.303624] ? nlmsg_notify+0x1b0/0x1b0 [ 2820.307587] ? kernel_recvmsg+0x210/0x210 [ 2820.311725] ? security_socket_sendmsg+0x83/0xb0 [ 2820.316476] ? nlmsg_notify+0x1b0/0x1b0 [ 2820.320448] sock_sendmsg+0xb5/0x100 [ 2820.324157] ___sys_sendmsg+0x6c8/0x800 [ 2820.328124] ? get_pid_task+0x91/0x130 [ 2820.332004] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2820.336755] ? lock_downgrade+0x740/0x740 [ 2820.340906] ? __fget+0x23e/0x3e0 [ 2820.344354] ? lock_acquire+0x170/0x3f0 [ 2820.348322] ? lock_downgrade+0x740/0x740 [ 2820.352471] ? __fdget+0x19b/0x1f0 [ 2820.356010] ? sockfd_lookup_light+0xb2/0x160 [ 2820.360504] __sys_sendmsg+0xa3/0x120 [ 2820.364300] ? SyS_shutdown+0x160/0x160 [ 2820.368359] ? wait_for_completion_io+0x10/0x10 [ 2820.373029] ? SyS_read+0x210/0x210 [ 2820.376649] SyS_sendmsg+0x27/0x40 [ 2820.380179] ? __sys_sendmsg+0x120/0x120 [ 2820.384234] do_syscall_64+0x1d5/0x640 [ 2820.388129] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2820.393308] RIP: 0033:0x7f56575860a9 [ 2820.397004] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2820.404700] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2820.411965] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2820.419230] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2820.426497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2820.433768] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2820.443312] nbd: failed to add new device 04:13:23 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000040c73c177be8958"], 0x14}}, 0x0) 04:13:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002c14925c2f7a65eb4c1f166eabf77489dd61c7d1035f3e281ae01f4fbed4ce2c1835c9fa68daa74dcdfa8961ccf22f730edb79a51f64d24f7fb6afefe3cd1b4d5e83bd60967dca3bf1f17678d4fbdc9456d6a3e03bd4d5a39cc1cafb0b1f1a1dd249336801c235ff6839eab67d5870bc94a6a7b975cb39bb8617f74bd7fb9deed37c85c949c506c6b3a75f9abdd5481980d00ca4c10ea9d6e51"], 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002c14925c2f7a65eb4c1f166eabf77489dd61c7d1035f3e281ae01f4fbed4ce2c1835c9fa68daa74dcdfa8961ccf22f730edb79a51f64d24f7fb6afefe3cd1b4d5e83bd60967dca3bf1f17678d4fbdc9456d6a3e03bd4d5a39cc1cafb0b1f1a1dd249336801c235ff6839eab67d5870bc94a6a7b975cb39bb8617f74bd7fb9deed37c85c949c506c6b3a75f9abdd5481980d00ca4c10ea9d6e51"], 0x4c}}, 0x0) (async) 04:13:23 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00007311592e2b04c641f8516800a1870153f17663c92ed20d37fca3793a93ae34583cadf7f90e72b82da59a788e1336b041b993e602bb817a61a460519bc66bc8f37925a6406a979b360b0f6ca5a755e5c03837531b8c90982f1967b30000003a4a00"/116, @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000a6cd", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:23 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 45) 04:13:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) (async) 04:13:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r2, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044000}, 0x48041) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x48040) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x30b, 0xfffffffd}, 0x14}}, 0x0) 04:13:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) [ 2820.598492] nbd: must specify a size in bytes for the device [ 2820.614617] FAULT_INJECTION: forcing a failure. [ 2820.614617] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.629532] CPU: 1 PID: 24455 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2820.637428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2820.646774] Call Trace: [ 2820.649362] dump_stack+0x1b2/0x281 [ 2820.652988] should_fail.cold+0x10a/0x149 [ 2820.657135] should_failslab+0xd6/0x130 [ 2820.661113] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2820.666217] __kmalloc_node+0x38/0x70 [ 2820.670018] blk_mq_alloc_rq_map+0xd2/0x220 [ 2820.674336] blk_mq_sched_alloc_tags+0xaa/0x240 [ 2820.679000] blk_mq_init_sched+0x18d/0x4a0 [ 2820.683348] ? _raw_spin_unlock+0x29/0x40 [ 2820.687499] elevator_init+0x2ee/0x410 [ 2820.691389] blk_mq_sched_init+0x28/0x40 [ 2820.695444] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2820.700547] blk_mq_init_queue+0x5a/0x90 [ 2820.704606] nbd_dev_add+0x2c6/0x800 [ 2820.708311] ? nbd_send_cmd+0x11f0/0x11f0 [ 2820.712452] ? ns_capable_common+0x127/0x150 [ 2820.716861] nbd_genl_connect+0x3a4/0x13e0 [ 2820.721091] ? lock_acquire+0x170/0x3f0 [ 2820.725057] ? nbd_xmit_timeout+0x500/0x500 [ 2820.729377] ? validate_nla+0x192/0x5e0 [ 2820.733341] ? nla_parse+0x157/0x1f0 [ 2820.737047] genl_family_rcv_msg+0x572/0xb20 [ 2820.741448] ? genl_rcv+0x40/0x40 [ 2820.744894] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2820.750339] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2820.755434] ? trace_hardirqs_on+0x10/0x10 [ 2820.760109] genl_rcv_msg+0xaf/0x140 [ 2820.763817] netlink_rcv_skb+0x125/0x390 [ 2820.767881] ? genl_family_rcv_msg+0xb20/0xb20 [ 2820.772453] ? netlink_ack+0x9a0/0x9a0 [ 2820.776333] ? lock_acquire+0x170/0x3f0 [ 2820.780307] genl_rcv+0x24/0x40 [ 2820.783575] netlink_unicast+0x437/0x610 [ 2820.787628] ? netlink_sendskb+0xd0/0xd0 [ 2820.791681] ? __check_object_size+0x179/0x230 [ 2820.796254] netlink_sendmsg+0x648/0xbc0 [ 2820.800320] ? nlmsg_notify+0x1b0/0x1b0 [ 2820.804285] ? kernel_recvmsg+0x210/0x210 [ 2820.808435] ? security_socket_sendmsg+0x83/0xb0 [ 2820.813180] ? nlmsg_notify+0x1b0/0x1b0 [ 2820.817146] sock_sendmsg+0xb5/0x100 [ 2820.820852] ___sys_sendmsg+0x6c8/0x800 [ 2820.824817] ? get_pid_task+0x91/0x130 [ 2820.828696] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2820.833444] ? lock_downgrade+0x740/0x740 [ 2820.837594] ? __fget+0x23e/0x3e0 [ 2820.841047] ? lock_acquire+0x170/0x3f0 [ 2820.845018] ? lock_downgrade+0x740/0x740 [ 2820.849250] ? __fdget+0x19b/0x1f0 [ 2820.852875] ? sockfd_lookup_light+0xb2/0x160 [ 2820.857369] __sys_sendmsg+0xa3/0x120 [ 2820.861162] ? SyS_shutdown+0x160/0x160 [ 2820.865127] ? wait_for_completion_io+0x10/0x10 [ 2820.869794] ? SyS_read+0x210/0x210 [ 2820.873544] SyS_sendmsg+0x27/0x40 [ 2820.877076] ? __sys_sendmsg+0x120/0x120 [ 2820.881130] do_syscall_64+0x1d5/0x640 [ 2820.885016] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2820.890195] RIP: 0033:0x7f56575860a9 [ 2820.893896] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2820.901600] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2820.908861] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2820.916129] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2820.923502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2820.930773] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) 04:13:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xb4, r1, 0x200, 0x70bd26, 0x1c, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0xb4}}, 0xc804) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r3, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r2, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044000}, 0x48041) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x48040) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x30b, 0xfffffffd}, 0x14}}, 0x0) [ 2820.973858] nbd: failed to add new device [ 2820.978734] nbd: must specify a size in bytes for the device 04:13:24 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 46) 04:13:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) 04:13:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) 04:13:24 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00007311592e2b04c641f8516800a1870153f17663c92ed20d37fca3793a93ae34583cadf7f90e72b82da59a788e1336b041b993e602bb817a61a460519bc66bc8f37925a6406a979b360b0f6ca5a755e5c03837531b8c90982f1967b30000003a4a00"/116, @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000a6cd", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xb4, r1, 0x200, 0x70bd26, 0x1c, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0xb4}}, 0xc804) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r3, @ANYBLOB="01"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xb4, r1, 0x200, 0x70bd26, 0x1c, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0xb4}}, 0xc804) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r3, @ANYBLOB="01"], 0x14}}, 0x0) (async) 04:13:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r2, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044000}, 0x48041) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x48040) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x30b, 0xfffffffd}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) (async) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r2, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044000}, 0x48041) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x48040) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x30b, 0xfffffffd}, 0x14}}, 0x0) (async) [ 2821.148141] FAULT_INJECTION: forcing a failure. [ 2821.148141] name failslab, interval 1, probability 0, space 0, times 0 [ 2821.161226] CPU: 1 PID: 24499 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2821.169132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2821.178483] Call Trace: [ 2821.181073] dump_stack+0x1b2/0x281 [ 2821.184704] should_fail.cold+0x10a/0x149 [ 2821.188848] should_failslab+0xd6/0x130 [ 2821.192806] kmem_cache_alloc_node+0x263/0x410 [ 2821.197391] __alloc_skb+0x5c/0x510 [ 2821.200995] kobject_uevent_env+0x882/0xf30 [ 2821.205298] device_del+0x642/0xa80 [ 2821.208902] ? __device_links_no_driver+0x1b0/0x1b0 [ 2821.213900] ? pm_runtime_set_memalloc_noio+0xdc/0x140 [ 2821.219154] del_gendisk+0x65c/0x820 [ 2821.222842] ? refcount_dec_not_one+0x75/0xc0 [ 2821.227323] ? disk_events_poll_msecs_store+0x150/0x150 [ 2821.232685] ? wait_for_completion_io+0x10/0x10 [ 2821.237343] nbd_put.part.0+0xb0/0x140 [ 2821.241203] nbd_genl_connect+0xcf6/0x13e0 [ 2821.245420] ? nbd_xmit_timeout+0x500/0x500 [ 2821.249716] ? validate_nla+0x192/0x5e0 [ 2821.253671] genl_family_rcv_msg+0x572/0xb20 [ 2821.258057] ? genl_rcv+0x40/0x40 [ 2821.261488] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2821.266914] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2821.271990] ? trace_hardirqs_on+0x10/0x10 [ 2821.276204] genl_rcv_msg+0xaf/0x140 [ 2821.279894] netlink_rcv_skb+0x125/0x390 [ 2821.283944] ? genl_family_rcv_msg+0xb20/0xb20 [ 2821.288514] ? netlink_ack+0x9a0/0x9a0 [ 2821.292385] ? lock_acquire+0x170/0x3f0 [ 2821.296349] genl_rcv+0x24/0x40 [ 2821.299604] netlink_unicast+0x437/0x610 [ 2821.303642] ? netlink_sendskb+0xd0/0xd0 [ 2821.307677] ? __check_object_size+0x179/0x230 [ 2821.312232] netlink_sendmsg+0x648/0xbc0 [ 2821.316271] ? nlmsg_notify+0x1b0/0x1b0 [ 2821.320230] ? kernel_recvmsg+0x210/0x210 [ 2821.324353] ? security_socket_sendmsg+0x83/0xb0 [ 2821.329082] ? nlmsg_notify+0x1b0/0x1b0 [ 2821.333030] sock_sendmsg+0xb5/0x100 [ 2821.336720] ___sys_sendmsg+0x6c8/0x800 [ 2821.340687] ? get_pid_task+0x91/0x130 [ 2821.344566] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2821.349310] ? lock_downgrade+0x740/0x740 [ 2821.353437] ? __fget+0x23e/0x3e0 [ 2821.356867] ? lock_acquire+0x170/0x3f0 [ 2821.360824] ? lock_downgrade+0x740/0x740 [ 2821.364959] ? __fdget+0x19b/0x1f0 [ 2821.368481] ? sockfd_lookup_light+0xb2/0x160 [ 2821.372960] __sys_sendmsg+0xa3/0x120 [ 2821.376737] ? SyS_shutdown+0x160/0x160 [ 2821.380689] ? wait_for_completion_io+0x10/0x10 [ 2821.385339] ? SyS_read+0x210/0x210 [ 2821.388940] SyS_sendmsg+0x27/0x40 [ 2821.392628] ? __sys_sendmsg+0x120/0x120 [ 2821.396663] do_syscall_64+0x1d5/0x640 [ 2821.400526] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2821.405693] RIP: 0033:0x7f56575860a9 [ 2821.409380] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2821.417064] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2821.424311] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2821.431554] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2821.438800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 04:13:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (async) [ 2821.446046] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xb4, r1, 0x200, 0x70bd26, 0x1c, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0xb4}}, 0xc804) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r3, @ANYBLOB="01"], 0x14}}, 0x0) 04:13:24 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r9, 0x0, 0x0, r10, r11, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000200)=[r0, r3, r6, r9], &(0x7f0000000240)=[0x8, 0x400, 0x8, 0xffff, 0x18, 0x2, 0xffffffffffffff41, 0x1], 0x4, 0x1}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r12) sendmsg$NBD_CMD_STATUS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000090e09f9f278e2228357c7f935f69e1bf00", @ANYRES16=r13, @ANYBLOB="010000000001f4ff0500000000003e423a78bb4f042fdf4ba4c2b8692ddf804222f830dea32079555304ba1cffffffff16b55eff535906f9e22e06f5c938a80f2721d9464b852cf114042a24e30b5814568262e7f9f70b70ac8f197080a3f9d9ec86f2903c392f7839f3749e5f8b8378b0f240c56aee22e22d26be5afb080b835c0c80f4df73fe8de8ad35283b3a00d1c73173d52658af81b877ea8476afe0546b93c49ae1bdf8f5cfe98cf98be9c7f0015dfc445954e3557c39932301d3e87de4af02f3011c896244c2fef83b059c7feef21c742e7325efc4b47a6f581fb9891043d74a591b"], 0x14}}, 0x0) 04:13:25 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 47) 04:13:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) 04:13:25 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xffffffffffffff35}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r7) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2821.567897] nla_parse: 5 callbacks suppressed [ 2821.567903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 04:13:25 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r9, 0x0, 0x0, r10, r11, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000200)=[r0, r3, r6, r9], &(0x7f0000000240)=[0x8, 0x400, 0x8, 0xffff, 0x18, 0x2, 0xffffffffffffff41, 0x1], 0x4, 0x1}) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r12) sendmsg$NBD_CMD_STATUS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000090e09f9f278e2228357c7f935f69e1bf00", @ANYRES16=r13, @ANYBLOB="010000000001f4ff0500000000003e423a78bb4f042fdf4ba4c2b8692ddf804222f830dea32079555304ba1cffffffff16b55eff535906f9e22e06f5c938a80f2721d9464b852cf114042a24e30b5814568262e7f9f70b70ac8f197080a3f9d9ec86f2903c392f7839f3749e5f8b8378b0f240c56aee22e22d26be5afb080b835c0c80f4df73fe8de8ad35283b3a00d1c73173d52658af81b877ea8476afe0546b93c49ae1bdf8f5cfe98cf98be9c7f0015dfc445954e3557c39932301d3e87de4af02f3011c896244c2fef83b059c7feef21c742e7325efc4b47a6f581fb9891043d74a591b"], 0x14}}, 0x0) 04:13:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) 04:13:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) [ 2821.615429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2821.652822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2821.681184] FAULT_INJECTION: forcing a failure. [ 2821.681184] name failslab, interval 1, probability 0, space 0, times 0 [ 2821.700148] CPU: 0 PID: 24552 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2821.708304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2821.717652] Call Trace: [ 2821.720242] dump_stack+0x1b2/0x281 [ 2821.723877] should_fail.cold+0x10a/0x149 [ 2821.728023] should_failslab+0xd6/0x130 [ 2821.731989] kmem_cache_alloc_node+0x263/0x410 [ 2821.736558] __alloc_skb+0x5c/0x510 [ 2821.740164] kobject_uevent_env+0x882/0xf30 [ 2821.744466] device_del+0x642/0xa80 [ 2821.748077] ? __device_links_no_driver+0x1b0/0x1b0 [ 2821.753082] ? pm_runtime_set_memalloc_noio+0xdc/0x140 [ 2821.758379] del_gendisk+0x65c/0x820 [ 2821.762072] ? refcount_dec_not_one+0x75/0xc0 [ 2821.766542] ? disk_events_poll_msecs_store+0x150/0x150 [ 2821.771900] ? wait_for_completion_io+0x10/0x10 [ 2821.776568] nbd_put.part.0+0xb0/0x140 [ 2821.780448] nbd_genl_connect+0xcf6/0x13e0 [ 2821.784661] ? nbd_xmit_timeout+0x500/0x500 [ 2821.788971] ? validate_nla+0x192/0x5e0 [ 2821.792944] genl_family_rcv_msg+0x572/0xb20 [ 2821.797345] ? genl_rcv+0x40/0x40 [ 2821.800778] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2821.806213] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2821.811300] ? trace_hardirqs_on+0x10/0x10 [ 2821.815524] genl_rcv_msg+0xaf/0x140 [ 2821.819219] netlink_rcv_skb+0x125/0x390 [ 2821.823256] ? genl_family_rcv_msg+0xb20/0xb20 [ 2821.827818] ? netlink_ack+0x9a0/0x9a0 [ 2821.831705] ? lock_acquire+0x170/0x3f0 [ 2821.835676] genl_rcv+0x24/0x40 [ 2821.838930] netlink_unicast+0x437/0x610 [ 2821.842976] ? netlink_sendskb+0xd0/0xd0 [ 2821.847015] ? __check_object_size+0x179/0x230 [ 2821.851582] netlink_sendmsg+0x648/0xbc0 [ 2821.855627] ? nlmsg_notify+0x1b0/0x1b0 [ 2821.859587] ? kernel_recvmsg+0x210/0x210 [ 2821.863720] ? security_socket_sendmsg+0x83/0xb0 [ 2821.868459] ? nlmsg_notify+0x1b0/0x1b0 [ 2821.872428] sock_sendmsg+0xb5/0x100 [ 2821.876128] ___sys_sendmsg+0x6c8/0x800 [ 2821.880084] ? get_pid_task+0x91/0x130 [ 2821.883950] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2821.888687] ? lock_downgrade+0x740/0x740 [ 2821.892824] ? __fget+0x23e/0x3e0 [ 2821.896319] ? lock_acquire+0x170/0x3f0 [ 2821.900275] ? lock_downgrade+0x740/0x740 [ 2821.904404] ? __fdget+0x19b/0x1f0 [ 2821.907925] ? sockfd_lookup_light+0xb2/0x160 [ 2821.912408] __sys_sendmsg+0xa3/0x120 [ 2821.916198] ? SyS_shutdown+0x160/0x160 [ 2821.920169] ? wait_for_completion_io+0x10/0x10 [ 2821.924823] ? SyS_read+0x210/0x210 [ 2821.928428] SyS_sendmsg+0x27/0x40 [ 2821.931951] ? __sys_sendmsg+0x120/0x120 [ 2821.936003] do_syscall_64+0x1d5/0x640 [ 2821.939870] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2821.945038] RIP: 0033:0x7f56575860a9 [ 2821.948722] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2821.956408] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2821.963654] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2821.970898] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 04:13:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x9}, 0x4000090) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x2c}}, 0x8000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB="16008000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) 04:13:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0a1bd044c5ee7257d3d08dd796c67dee42e4db608a94a11bb1834efc0416f9cdadd6af48361ec346875fad18e4709dc154ce08f5f1dec84408e34", @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES64=r3, @ANYRES16=r1, @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x24004040) [ 2821.978149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2821.985400] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:25 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xffffffffffffff35}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r7) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:25 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r9, 0x0, 0x0, r10, r11, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000200)=[r0, r3, r6, r9], &(0x7f0000000240)=[0x8, 0x400, 0x8, 0xffff, 0x18, 0x2, 0xffffffffffffff41, 0x1], 0x4, 0x1}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r12) sendmsg$NBD_CMD_STATUS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000090e09f9f278e2228357c7f935f69e1bf00", @ANYRES16=r13, @ANYBLOB="010000000001f4ff0500000000003e423a78bb4f042fdf4ba4c2b8692ddf804222f830dea32079555304ba1cffffffff16b55eff535906f9e22e06f5c938a80f2721d9464b852cf114042a24e30b5814568262e7f9f70b70ac8f197080a3f9d9ec86f2903c392f7839f3749e5f8b8378b0f240c56aee22e22d26be5afb080b835c0c80f4df73fe8de8ad35283b3a00d1c73173d52658af81b877ea8476afe0546b93c49ae1bdf8f5cfe98cf98be9c7f0015dfc445954e3557c39932301d3e87de4af02f3011c896244c2fef83b059c7feef21c742e7325efc4b47a6f581fb9891043d74a591b"], 0x14}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r0, 0x0, 0x0, r1, r2, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r4, 0x0, 0x0, r5, r6, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r5, r8, r6, r6, r6], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r9, 0x0, 0x0, r10, r11, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000200)=[r0, r3, r6, r9], &(0x7f0000000240)=[0x8, 0x400, 0x8, 0xffff, 0x18, 0x2, 0xffffffffffffff41, 0x1], 0x4, 0x1}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r12) (async) sendmsg$NBD_CMD_STATUS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000090e09f9f278e2228357c7f935f69e1bf00", @ANYRES16=r13, @ANYBLOB="010000000001f4ff0500000000003e423a78bb4f042fdf4ba4c2b8692ddf804222f830dea32079555304ba1cffffffff16b55eff535906f9e22e06f5c938a80f2721d9464b852cf114042a24e30b5814568262e7f9f70b70ac8f197080a3f9d9ec86f2903c392f7839f3749e5f8b8378b0f240c56aee22e22d26be5afb080b835c0c80f4df73fe8de8ad35283b3a00d1c73173d52658af81b877ea8476afe0546b93c49ae1bdf8f5cfe98cf98be9c7f0015dfc445954e3557c39932301d3e87de4af02f3011c896244c2fef83b059c7feef21c742e7325efc4b47a6f581fb9891043d74a591b"], 0x14}}, 0x0) (async) 04:13:25 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 48) 04:13:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0a1bd044c5ee7257d3d08dd796c67dee42e4db608a94a11bb1834efc0416f9cdadd6af48361ec346875fad18e4709dc154ce08f5f1dec84408e34", @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES64=r3, @ANYRES16=r1, @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x24004040) 04:13:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="42063ac245f642f15a212e9926ff7a8d84dbdf250200000026ee3fa79f9e5be2a6072c53034d272b9daf60bf3c57814cad001e8375a97fd15872f64ce941c36effaec7b3e11aa52287236b1357c37339d886fa39070558"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x884) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r7, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044001}, 0x54) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x24004800) 04:13:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) (async) 04:13:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0a1bd044c5ee7257d3d08dd796c67dee42e4db608a94a11bb1834efc0416f9cdadd6af48361ec346875fad18e4709dc154ce08f5f1dec84408e34", @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES64=r3, @ANYRES16=r1, @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x24004040) 04:13:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x9}, 0x4000090) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x2c}}, 0x8000) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB="16008000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) [ 2822.127713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2822.147133] nbd: socks must be embedded in a SOCK_ITEM attr [ 2822.163842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:25 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xffffffffffffff35}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r7) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) [ 2822.224049] FAULT_INJECTION: forcing a failure. [ 2822.224049] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2822.251362] CPU: 0 PID: 24611 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2822.259261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2822.268600] Call Trace: [ 2822.271201] dump_stack+0x1b2/0x281 [ 2822.274824] should_fail.cold+0x10a/0x149 [ 2822.278963] __alloc_pages_nodemask+0x21e/0x2900 [ 2822.283722] ? __kmalloc_node+0x4c/0x70 [ 2822.287692] ? blk_mq_alloc_rq_map+0x113/0x220 [ 2822.292275] ? blk_mq_init_sched+0x18d/0x4a0 [ 2822.296673] ? elevator_init+0x2ee/0x410 [ 2822.300730] ? nbd_genl_connect+0x3a4/0x13e0 [ 2822.305127] ? genl_family_rcv_msg+0x572/0xb20 [ 2822.309698] ? netlink_rcv_skb+0x125/0x390 [ 2822.313933] ? genl_rcv+0x24/0x40 [ 2822.317380] ? netlink_unicast+0x437/0x610 [ 2822.321613] ? netlink_sendmsg+0x648/0xbc0 [ 2822.325839] ? sock_sendmsg+0xb5/0x100 [ 2822.329722] ? ___sys_sendmsg+0x6c8/0x800 [ 2822.333859] ? __sys_sendmsg+0xa3/0x120 [ 2822.337824] ? SyS_sendmsg+0x27/0x40 [ 2822.341533] ? do_syscall_64+0x1d5/0x640 [ 2822.345585] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2822.350945] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2822.355795] ? __lockdep_init_map+0x100/0x560 [ 2822.360286] ? __lockdep_init_map+0x100/0x560 [ 2822.364782] ? pid_show+0xb0/0xb0 [ 2822.368258] ? debug_mutex_init+0x28/0x60 [ 2822.372405] blk_mq_alloc_rqs+0x227/0x6d0 [ 2822.376557] blk_mq_sched_alloc_tags+0x112/0x240 [ 2822.381316] blk_mq_init_sched+0x18d/0x4a0 [ 2822.385584] ? _raw_spin_unlock+0x29/0x40 [ 2822.389729] elevator_init+0x2ee/0x410 [ 2822.393610] blk_mq_sched_init+0x28/0x40 [ 2822.397760] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 2822.402959] blk_mq_init_queue+0x5a/0x90 [ 2822.407025] nbd_dev_add+0x2c6/0x800 [ 2822.410913] ? nbd_send_cmd+0x11f0/0x11f0 [ 2822.415058] ? ns_capable_common+0x127/0x150 [ 2822.419461] nbd_genl_connect+0x3a4/0x13e0 [ 2822.423705] ? nbd_xmit_timeout+0x500/0x500 [ 2822.428018] ? __mutex_lock+0x356/0x1310 [ 2822.432075] ? validate_nla+0x192/0x5e0 [ 2822.436049] ? nla_parse+0x157/0x1f0 [ 2822.439937] genl_family_rcv_msg+0x572/0xb20 [ 2822.444343] ? genl_rcv+0x40/0x40 [ 2822.447978] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2822.453428] ? trace_hardirqs_on+0x10/0x10 [ 2822.457753] genl_rcv_msg+0xaf/0x140 [ 2822.461464] netlink_rcv_skb+0x125/0x390 [ 2822.465523] ? genl_family_rcv_msg+0xb20/0xb20 [ 2822.470100] ? netlink_ack+0x9a0/0x9a0 [ 2822.473986] ? lock_acquire+0x170/0x3f0 [ 2822.477958] genl_rcv+0x24/0x40 [ 2822.481229] netlink_unicast+0x437/0x610 [ 2822.485287] ? netlink_sendskb+0xd0/0xd0 [ 2822.489347] ? __check_object_size+0x179/0x230 [ 2822.493930] netlink_sendmsg+0x648/0xbc0 [ 2822.497987] ? nlmsg_notify+0x1b0/0x1b0 [ 2822.501952] ? kernel_recvmsg+0x210/0x210 [ 2822.506104] ? security_socket_sendmsg+0x83/0xb0 [ 2822.510848] ? nlmsg_notify+0x1b0/0x1b0 [ 2822.514814] sock_sendmsg+0xb5/0x100 [ 2822.518521] ___sys_sendmsg+0x6c8/0x800 [ 2822.522492] ? get_pid_task+0x91/0x130 [ 2822.526370] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2822.531119] ? lock_downgrade+0x740/0x740 [ 2822.535260] ? __fget+0x23e/0x3e0 [ 2822.538709] ? lock_acquire+0x170/0x3f0 [ 2822.542678] ? lock_downgrade+0x740/0x740 [ 2822.546833] ? __fdget+0x19b/0x1f0 [ 2822.550376] ? sockfd_lookup_light+0xb2/0x160 [ 2822.554865] __sys_sendmsg+0xa3/0x120 [ 2822.558658] ? SyS_shutdown+0x160/0x160 [ 2822.562625] ? wait_for_completion_io+0x10/0x10 [ 2822.567300] ? SyS_read+0x210/0x210 [ 2822.570920] SyS_sendmsg+0x27/0x40 [ 2822.574454] ? __sys_sendmsg+0x120/0x120 [ 2822.578683] do_syscall_64+0x1d5/0x640 [ 2822.582568] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2822.587766] RIP: 0033:0x7f56575860a9 [ 2822.591467] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2822.599165] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2822.606422] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2822.613686] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2822.620947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2822.628206] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2822.676462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:13:26 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000500)=0xfffffff9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="42063ac245f642f15a212e9926ff7a8d84dbdf250200000026ee3fa79f9e5be2a6072c53034d272b9daf60bf3c57814cad001e8375a97fd15872f64ce941c36effaec7b3e11aa52287236b1357c37339d886fa39070558"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x884) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r7, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044001}, 0x54) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x24004800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="42063ac245f642f15a212e9926ff7a8d84dbdf250200000026ee3fa79f9e5be2a6072c53034d272b9daf60bf3c57814cad001e8375a97fd15872f64ce941c36effaec7b3e11aa52287236b1357c37339d886fa39070558"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r4) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x884) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r6) (async) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r7, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044001}, 0x54) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x24004800) (async) 04:13:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x30b, 0x70bd28}, 0x14}}, 0x0) 04:13:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x9}, 0x4000090) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x2c}}, 0x8000) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB="16008000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (rerun: 32) 04:13:26 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 49) 04:13:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB='\x00'], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x20}}, 0x4001) 04:13:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x30b, 0x70bd28}, 0x14}}, 0x0) 04:13:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB='\x00'], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x20}}, 0x4001) 04:13:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="42063ac245f642f15a212e9926ff7a8d84dbdf250200000026ee3fa79f9e5be2a6072c53034d272b9daf60bf3c57814cad001e8375a97fd15872f64ce941c36effaec7b3e11aa52287236b1357c37339d886fa39070558"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x884) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x24, r7, 0x9748a2d2f4b7ad35, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044001}, 0x54) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x24004800) [ 2822.816281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2822.825213] nbd: socks must be embedded in a SOCK_ITEM attr [ 2822.849592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2822.879752] FAULT_INJECTION: forcing a failure. [ 2822.879752] name failslab, interval 1, probability 0, space 0, times 0 [ 2822.899528] CPU: 0 PID: 24692 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2822.907417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2822.917015] Call Trace: [ 2822.919583] dump_stack+0x1b2/0x281 [ 2822.923209] should_fail.cold+0x10a/0x149 [ 2822.927357] should_failslab+0xd6/0x130 [ 2822.931333] kmem_cache_alloc_node+0x263/0x410 [ 2822.935910] __alloc_skb+0x5c/0x510 [ 2822.939533] kobject_uevent_env+0x882/0xf30 [ 2822.943837] device_del+0x642/0xa80 [ 2822.947449] ? __device_links_no_driver+0x1b0/0x1b0 [ 2822.952458] ? pm_runtime_set_memalloc_noio+0xdc/0x140 [ 2822.957719] del_gendisk+0x65c/0x820 [ 2822.961499] ? refcount_dec_not_one+0x75/0xc0 [ 2822.965972] ? disk_events_poll_msecs_store+0x150/0x150 [ 2822.971326] ? wait_for_completion_io+0x10/0x10 [ 2822.975994] nbd_put.part.0+0xb0/0x140 [ 2822.979868] nbd_genl_connect+0xcf6/0x13e0 [ 2822.984089] ? nbd_xmit_timeout+0x500/0x500 [ 2822.988405] ? validate_nla+0x192/0x5e0 [ 2822.992380] genl_family_rcv_msg+0x572/0xb20 [ 2822.996783] ? genl_rcv+0x40/0x40 [ 2823.000235] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2823.005671] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2823.010759] ? trace_hardirqs_on+0x10/0x10 [ 2823.014992] genl_rcv_msg+0xaf/0x140 [ 2823.018701] netlink_rcv_skb+0x125/0x390 [ 2823.022741] ? genl_family_rcv_msg+0xb20/0xb20 [ 2823.027303] ? netlink_ack+0x9a0/0x9a0 [ 2823.031186] ? lock_acquire+0x170/0x3f0 [ 2823.035154] genl_rcv+0x24/0x40 [ 2823.038425] netlink_unicast+0x437/0x610 [ 2823.042469] ? netlink_sendskb+0xd0/0xd0 [ 2823.046514] ? __check_object_size+0x179/0x230 [ 2823.051079] netlink_sendmsg+0x648/0xbc0 [ 2823.055133] ? nlmsg_notify+0x1b0/0x1b0 [ 2823.059100] ? kernel_recvmsg+0x210/0x210 [ 2823.063243] ? security_socket_sendmsg+0x83/0xb0 [ 2823.067985] ? nlmsg_notify+0x1b0/0x1b0 [ 2823.071950] sock_sendmsg+0xb5/0x100 [ 2823.075653] ___sys_sendmsg+0x6c8/0x800 [ 2823.079617] ? get_pid_task+0x91/0x130 [ 2823.083486] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2823.088231] ? lock_downgrade+0x740/0x740 [ 2823.092366] ? __fget+0x23e/0x3e0 [ 2823.095814] ? lock_acquire+0x170/0x3f0 [ 2823.099779] ? lock_downgrade+0x740/0x740 [ 2823.103919] ? __fdget+0x19b/0x1f0 [ 2823.107436] ? sockfd_lookup_light+0xb2/0x160 [ 2823.111915] __sys_sendmsg+0xa3/0x120 [ 2823.115708] ? SyS_shutdown+0x160/0x160 [ 2823.119667] ? wait_for_completion_io+0x10/0x10 [ 2823.124315] ? SyS_read+0x210/0x210 [ 2823.127933] SyS_sendmsg+0x27/0x40 [ 2823.131464] ? __sys_sendmsg+0x120/0x120 [ 2823.135513] do_syscall_64+0x1d5/0x640 [ 2823.139387] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2823.144553] RIP: 0033:0x7f56575860a9 [ 2823.148237] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2823.155920] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2823.163169] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2823.170498] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.177749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2823.184998] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:26 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 50) [ 2823.248846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:13:26 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000500)=0xfffffff9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000500)=0xfffffff9) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async) 04:13:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r1, @ANYBLOB='\x00'], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x20}}, 0x4001) [ 2823.334478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2823.354873] nbd: socks must be embedded in a SOCK_ITEM attr 04:13:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000100000000000000050400003cb1cb5d40386a637ff65c47b6836c32b1ad6732876b679b93dee42a779b77a7e24b76485b640b61fcf23747628bbf50140aa2aae0a925a36390a4c629695bd62921b5d8b96e8a5d609e250420940ca43ae6bf4412f4f2ce6040d0caa372eb1db5f370519d0540c366bb533440bb25e20f0f9df9cbcc7667eb42385d8ecc52a5c850bf45f101a50dfe495da8ca3fdc6f3a4e1142686163665714"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0, 0x0, r3, r4, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x800, 0xda63, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r3, r6, r4, r4, r4], 0x1f, 0x5, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0xd, 0x0, "476b03e0d8ee8df97982df45403c5e69c095c5bd95483804bc9a699ddc90ca6792422c6a8460047bbc92693c1671ef3bb4dd822d7e3baa3e6f0b69a2f3bf6be27bdf67544c3af8051e33128629b6eac0"}, 0xd8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r7, 0x0, 0x0, r8, r9, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r8, r11, r9, r9, r9], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r12, 0x0, 0x0, r13, r14, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r15, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r13, r16, r14, r14, r14], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r10, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[r16, r3, r6, r6, r6, r6, 0x0, r2, r6], 0x9}) 04:13:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r2, 0x30b, 0x70bd28}, 0x14}}, 0x0) [ 2823.384334] FAULT_INJECTION: forcing a failure. [ 2823.384334] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.411219] CPU: 0 PID: 24739 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2823.419119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2823.428469] Call Trace: [ 2823.431047] dump_stack+0x1b2/0x281 [ 2823.434666] should_fail.cold+0x10a/0x149 [ 2823.438804] should_failslab+0xd6/0x130 [ 2823.442766] kmem_cache_alloc_node+0x263/0x410 [ 2823.447331] __alloc_skb+0x5c/0x510 [ 2823.450935] kobject_uevent_env+0x882/0xf30 [ 2823.455239] device_del+0x642/0xa80 [ 2823.458842] ? __device_links_no_driver+0x1b0/0x1b0 [ 2823.463851] ? pm_runtime_set_memalloc_noio+0xdc/0x140 [ 2823.469119] del_gendisk+0x65c/0x820 [ 2823.472833] ? refcount_dec_not_one+0x75/0xc0 [ 2823.477320] ? disk_events_poll_msecs_store+0x150/0x150 [ 2823.482671] ? wait_for_completion_io+0x10/0x10 [ 2823.487329] nbd_put.part.0+0xb0/0x140 [ 2823.491205] nbd_genl_connect+0xcf6/0x13e0 [ 2823.495433] ? nbd_xmit_timeout+0x500/0x500 [ 2823.499736] ? validate_nla+0x192/0x5e0 [ 2823.503707] genl_family_rcv_msg+0x572/0xb20 [ 2823.508107] ? genl_rcv+0x40/0x40 [ 2823.511549] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2823.516990] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2823.522084] ? trace_hardirqs_on+0x10/0x10 [ 2823.526318] genl_rcv_msg+0xaf/0x140 [ 2823.530028] netlink_rcv_skb+0x125/0x390 [ 2823.534074] ? genl_family_rcv_msg+0xb20/0xb20 [ 2823.538636] ? netlink_ack+0x9a0/0x9a0 [ 2823.542508] ? lock_acquire+0x170/0x3f0 [ 2823.546468] genl_rcv+0x24/0x40 [ 2823.549723] netlink_unicast+0x437/0x610 [ 2823.553781] ? netlink_sendskb+0xd0/0xd0 [ 2823.557829] ? __check_object_size+0x179/0x230 [ 2823.562395] netlink_sendmsg+0x648/0xbc0 [ 2823.566473] ? nlmsg_notify+0x1b0/0x1b0 [ 2823.570427] ? kernel_recvmsg+0x210/0x210 [ 2823.574564] ? security_socket_sendmsg+0x83/0xb0 [ 2823.579310] ? nlmsg_notify+0x1b0/0x1b0 [ 2823.583270] sock_sendmsg+0xb5/0x100 [ 2823.586974] ___sys_sendmsg+0x6c8/0x800 [ 2823.590936] ? get_pid_task+0x91/0x130 [ 2823.594806] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2823.599548] ? lock_downgrade+0x740/0x740 [ 2823.603686] ? __fget+0x23e/0x3e0 [ 2823.607124] ? lock_acquire+0x170/0x3f0 [ 2823.611080] ? lock_downgrade+0x740/0x740 [ 2823.615218] ? __fdget+0x19b/0x1f0 [ 2823.618734] ? sockfd_lookup_light+0xb2/0x160 [ 2823.623217] __sys_sendmsg+0xa3/0x120 [ 2823.627003] ? SyS_shutdown+0x160/0x160 [ 2823.630954] ? wait_for_completion_io+0x10/0x10 [ 2823.635613] ? SyS_read+0x210/0x210 [ 2823.639229] SyS_sendmsg+0x27/0x40 [ 2823.642762] ? __sys_sendmsg+0x120/0x120 [ 2823.646807] do_syscall_64+0x1d5/0x640 [ 2823.650680] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2823.655853] RIP: 0033:0x7f56575860a9 [ 2823.659546] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2823.667247] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2823.674501] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2823.681750] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.689004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2823.696250] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:27 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 51) 04:13:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e24, 0x20, @mcast2, 0x5}}, 0x0, 0x0, 0x11, 0x0, "2ab28674190c01719c1aeb913b2a5cd2a2be33653d5ab6091d2a02ce4c1db94e3ffec2d637e429805416de637248757e6d54452e2c456209c5bfe061980d9991c08b2bd4f4907f061971818e3f6219c5"}, 0xd8) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000080", @ANYRES16=r2, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) 04:13:27 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000500)=0xfffffff9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) (async) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000100000000000000050400003cb1cb5d40386a637ff65c47b6836c32b1ad6732876b679b93dee42a779b77a7e24b76485b640b61fcf23747628bbf50140aa2aae0a925a36390a4c629695bd62921b5d8b96e8a5d609e250420940ca43ae6bf4412f4f2ce6040d0caa372eb1db5f370519d0540c366bb533440bb25e20f0f9df9cbcc7667eb42385d8ecc52a5c850bf45f101a50dfe495da8ca3fdc6f3a4e1142686163665714"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0, 0x0, r3, r4, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x800, 0xda63, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r3, r6, r4, r4, r4], 0x1f, 0x5, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0xd, 0x0, "476b03e0d8ee8df97982df45403c5e69c095c5bd95483804bc9a699ddc90ca6792422c6a8460047bbc92693c1671ef3bb4dd822d7e3baa3e6f0b69a2f3bf6be27bdf67544c3af8051e33128629b6eac0"}, 0xd8) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r7, 0x0, 0x0, r8, r9, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r8, r11, r9, r9, r9], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r12, 0x0, 0x0, r13, r14, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r15, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r13, r16, r14, r14, r14], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r10, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[r16, r3, r6, r6, r6, r6, 0x0, r2, r6], 0x9}) 04:13:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYBLOB="b3345775125642d5456a60c539a5040c4d4dd8e489", @ANYBLOB="6ffe29fb134bf010ad1b4f76d966fb4c2596f4ca681a1f2a4a684d9fed7dc8aaf819277346e9b018b644d016b456cf931c896f1b2afbbc7573b262253549381a729fa936d327ff536ba731ed981b73169c257c1905c8c37cba9e10c0d30fc994f705f5e7689f530d0c465cf7ab93c62f7e7beff73b44e9d6874a1839ffc4e4058b069849398b4c57ad56d7a06509cd7ae4bd8aa9134c655093d4429ad5b585c8df02ece8a710b017e870034830d68e932bd11cffff4d8b5b060278", @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r3, 0x0, 0x0, r4, r5, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r4, r7, r5, r5, r5], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f0000000080)=[0xfffffff7, 0x202, 0xda64, 0x3, 0x7ff, 0x0, 0x7, 0x9, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r15 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r16, 0x0, 0x0, r17, r18, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r19, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r17, r20, r18, r18, r18], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xfc, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r11}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r14}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r15}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r19}, {0x8, 0x1, r21}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000000000000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000040}, 0x4040) [ 2823.767427] nbd: socks must be embedded in a SOCK_ITEM attr 04:13:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0600000000000000f3d6695828d1588c5ee5bc9ef7f36d00000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25020000000c0008003f000000000000000c00080009000000000000000c00020009000000000000000c00040001000000000000000c00020008000000000010000c0005000612000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x23, 0x1000, 0x1, 0x0, 0x81], 0x5, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ')'}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r13}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) 04:13:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYBLOB="b3345775125642d5456a60c539a5040c4d4dd8e489", @ANYBLOB="6ffe29fb134bf010ad1b4f76d966fb4c2596f4ca681a1f2a4a684d9fed7dc8aaf819277346e9b018b644d016b456cf931c896f1b2afbbc7573b262253549381a729fa936d327ff536ba731ed981b73169c257c1905c8c37cba9e10c0d30fc994f705f5e7689f530d0c465cf7ab93c62f7e7beff73b44e9d6874a1839ffc4e4058b069849398b4c57ad56d7a06509cd7ae4bd8aa9134c655093d4429ad5b585c8df02ece8a710b017e870034830d68e932bd11cffff4d8b5b060278", @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r3, 0x0, 0x0, r4, r5, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r4, r7, r5, r5, r5], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f0000000080)=[0xfffffff7, 0x202, 0xda64, 0x3, 0x7ff, 0x0, 0x7, 0x9, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r15 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r16, 0x0, 0x0, r17, r18, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r19, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r17, r20, r18, r18, r18], 0x1f, 0x5, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xfc, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r11}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r14}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r15}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r19}, {0x8, 0x1, r21}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000000000000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000040}, 0x4040) [ 2823.862551] FAULT_INJECTION: forcing a failure. [ 2823.862551] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.875518] CPU: 1 PID: 24791 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2823.883414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2823.892758] Call Trace: [ 2823.895331] dump_stack+0x1b2/0x281 [ 2823.898936] should_fail.cold+0x10a/0x149 [ 2823.903147] should_failslab+0xd6/0x130 [ 2823.907099] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2823.912181] __kmalloc_node_track_caller+0x38/0x70 [ 2823.917086] __alloc_skb+0x96/0x510 [ 2823.920695] kobject_uevent_env+0x882/0xf30 [ 2823.925014] device_del+0x642/0xa80 [ 2823.928634] ? __device_links_no_driver+0x1b0/0x1b0 [ 2823.933629] ? pm_runtime_set_memalloc_noio+0xdc/0x140 [ 2823.938883] del_gendisk+0x65c/0x820 [ 2823.942579] ? refcount_dec_not_one+0x75/0xc0 [ 2823.947054] ? disk_events_poll_msecs_store+0x150/0x150 [ 2823.952394] ? wait_for_completion_io+0x10/0x10 [ 2823.957040] nbd_put.part.0+0xb0/0x140 [ 2823.960903] nbd_genl_connect+0xcf6/0x13e0 [ 2823.965117] ? nbd_xmit_timeout+0x500/0x500 [ 2823.969512] ? validate_nla+0x192/0x5e0 [ 2823.973465] genl_family_rcv_msg+0x572/0xb20 [ 2823.977855] ? genl_rcv+0x40/0x40 [ 2823.981288] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2823.986721] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2823.991803] ? trace_hardirqs_on+0x10/0x10 [ 2823.996015] genl_rcv_msg+0xaf/0x140 [ 2823.999704] netlink_rcv_skb+0x125/0x390 [ 2824.003738] ? genl_family_rcv_msg+0xb20/0xb20 [ 2824.008293] ? netlink_ack+0x9a0/0x9a0 [ 2824.012154] ? lock_acquire+0x170/0x3f0 [ 2824.016104] genl_rcv+0x24/0x40 [ 2824.019356] netlink_unicast+0x437/0x610 [ 2824.023399] ? netlink_sendskb+0xd0/0xd0 [ 2824.027438] ? __check_object_size+0x179/0x230 [ 2824.032010] netlink_sendmsg+0x648/0xbc0 [ 2824.036049] ? nlmsg_notify+0x1b0/0x1b0 [ 2824.039998] ? kernel_recvmsg+0x210/0x210 [ 2824.044125] ? security_socket_sendmsg+0x83/0xb0 [ 2824.048852] ? nlmsg_notify+0x1b0/0x1b0 [ 2824.052798] sock_sendmsg+0xb5/0x100 [ 2824.056490] ___sys_sendmsg+0x6c8/0x800 [ 2824.060438] ? get_pid_task+0x91/0x130 [ 2824.064301] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2824.069034] ? lock_downgrade+0x740/0x740 [ 2824.073159] ? __fget+0x23e/0x3e0 [ 2824.076588] ? lock_acquire+0x170/0x3f0 [ 2824.080542] ? lock_downgrade+0x740/0x740 [ 2824.084674] ? __fdget+0x19b/0x1f0 [ 2824.088192] ? sockfd_lookup_light+0xb2/0x160 [ 2824.092666] __sys_sendmsg+0xa3/0x120 [ 2824.096443] ? SyS_shutdown+0x160/0x160 [ 2824.100399] ? wait_for_completion_io+0x10/0x10 [ 2824.105051] ? SyS_read+0x210/0x210 [ 2824.108661] SyS_sendmsg+0x27/0x40 [ 2824.112180] ? __sys_sendmsg+0x120/0x120 [ 2824.116215] do_syscall_64+0x1d5/0x640 [ 2824.120084] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2824.125249] RIP: 0033:0x7f56575860a9 [ 2824.128933] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2824.136630] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2824.143874] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2824.151119] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.158361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.165607] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 04:13:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000100000000000000050400003cb1cb5d40386a637ff65c47b6836c32b1ad6732876b679b93dee42a779b77a7e24b76485b640b61fcf23747628bbf50140aa2aae0a925a36390a4c629695bd62921b5d8b96e8a5d609e250420940ca43ae6bf4412f4f2ce6040d0caa372eb1db5f370519d0540c366bb533440bb25e20f0f9df9cbcc7667eb42385d8ecc52a5c850bf45f101a50dfe495da8ca3fdc6f3a4e1142686163665714"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0, 0x0, r3, r4, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x800, 0xda63, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r3, r6, r4, r4, r4], 0x1f, 0x5, 0x4}) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x0, 0xd, 0x0, "476b03e0d8ee8df97982df45403c5e69c095c5bd95483804bc9a699ddc90ca6792422c6a8460047bbc92693c1671ef3bb4dd822d7e3baa3e6f0b69a2f3bf6be27bdf67544c3af8051e33128629b6eac0"}, 0xd8) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r7, 0x0, 0x0, r8, r9, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r8, r11, r9, r9, r9], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r12, 0x0, 0x0, r13, r14, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r15, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r13, r16, r14, r14, r14], 0x1f, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r10, 0xc01064c5, &(0x7f00000000c0)={&(0x7f0000000080)=[r16, r3, r6, r6, r6, r6, 0x0, r2, r6], 0x9}) 04:13:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e24, 0x20, @mcast2, 0x5}}, 0x0, 0x0, 0x11, 0x0, "2ab28674190c01719c1aeb913b2a5cd2a2be33653d5ab6091d2a02ce4c1db94e3ffec2d637e429805416de637248757e6d54452e2c456209c5bfe061980d9991c08b2bd4f4907f061971818e3f6219c5"}, 0xd8) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000080", @ANYRES16=r2, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) 04:13:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYBLOB="b3345775125642d5456a60c539a5040c4d4dd8e489", @ANYBLOB="6ffe29fb134bf010ad1b4f76d966fb4c2596f4ca681a1f2a4a684d9fed7dc8aaf819277346e9b018b644d016b456cf931c896f1b2afbbc7573b262253549381a729fa936d327ff536ba731ed981b73169c257c1905c8c37cba9e10c0d30fc994f705f5e7689f530d0c465cf7ab93c62f7e7beff73b44e9d6874a1839ffc4e4058b069849398b4c57ad56d7a06509cd7ae4bd8aa9134c655093d4429ad5b585c8df02ece8a710b017e870034830d68e932bd11cffff4d8b5b060278", @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r3, 0x0, 0x0, r4, r5, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r4, r7, r5, r5, r5], 0x1f, 0x5, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f0000000080)=[0xfffffff7, 0x202, 0xda64, 0x3, 0x7ff, 0x0, 0x7, 0x9, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) r15 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r16, 0x0, 0x0, r17, r18, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r19, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r17, r20, r18, r18, r18], 0x1f, 0x5, 0x4}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xfc, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r11}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r14}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r15}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r19}, {0x8, 0x1, r21}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000000000000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000040}, 0x4040) 04:13:27 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="00000033b1f38dcf53689c9b6ea35eb57e130ce6ea661c6615391984134060ee89e3b395f487d19e9764579f265d9457ff1d503754334888637977d9be67b75784f2fa1e2f25cb37a9224de68b7a76c05c4b192074a80dc91a5d2b455f829af32c40cb802a9a513658f795f2aa9b01ca3da4e91ea9e5d4e481440fb4ffffffff000000000c6ed016527df308bdbfe2f4c3dfdae55c9a903a5b713bda988e02cc500228556e694088da585ef24bc49fe484704222b4eb8230861e816d99ed9fa7a4d32d", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000900), &(0x7f0000000940)=0x14) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r3) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004810) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 04:13:27 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x8ad, 0x5, 0x100, 0x1}, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="5789e699edb71174026f3314101c01000e000085393e8a62e00100af0000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r5) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '.*$^$+y+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x202}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CALIPSO\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (fail_nth: 52) 04:13:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0600000000000000f3d6695828d1588c5ee5bc9ef7f36d00000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25020000000c0008003f000000000000000c00080009000000000000000c00020009000000000000000c00040001000000000000000c00020008000000000010000c0005000612000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) (async, rerun: 64) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x23, 0x1000, 0x1, 0x0, 0x81], 0x5, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r11}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ')'}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r13}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c00078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002"], 0x4c}}, 0x0) (rerun: 32) [ 2824.237628] nbd: must specify a size in bytes for the device 04:13:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='Pc\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf25030000000c00050000000000000000000c0005002c000000000000000c00030000000000000000000c00040001000000000000000c0005000801000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048800}, 0x11) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000000000402b3971d09f6b870f0105000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:13:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYBLOB="e165a88bc562ea42cd2ee8"], 0x14}}, 0x0) 04:13:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x836321bbf5e89942, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2404e804) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x16, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2898000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80410}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x45) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000005c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000700)={&(0x7f0000000680)=[r8, 0x0, 0x0, r9, r10, 0x0], &(0x7f00000006c0)=[0x4, 0x2, 0x7], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000800)={&(0x7f00000007c0)=[0xfffffff7, 0x1ff, 0xda64, 0x3, 0x1ff, 0x0, 0x7, 0x2, 0x3], 0x9, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000840)={0x0, 0x5dca5187ff5f16f4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02064c3, &(0x7f00000008c0)={&(0x7f0000000880)=[r9, r12, r10, r10, r10], 0x1f, 0x5, 0x4}) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e24, 0x20, @mcast2, 0x5}}, 0x0, 0x0, 0x11, 0x0, "2ab28674190c01719c1aeb913b2a5cd2a2be33653d5ab6091d2a02ce4c1db94e3ffec2d637e429805416de637248757e6d54452e2c456209c5bfe061980d9991c08b2bd4f4907f061971818e3f6219c5"}, 0xd8) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000080", @ANYRES16=r2, @ANYBLOB="0b03000000000000000008000000"], 0x14}}, 0x0) [ 2824.319968] FAULT_INJECTION: forcing a failure. [ 2824.319968] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.368220] CPU: 0 PID: 24839 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2824.376125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2824.385473] Call Trace: [ 2824.388061] dump_stack+0x1b2/0x281 [ 2824.391689] should_fail.cold+0x10a/0x149 [ 2824.395843] should_failslab+0xd6/0x130 [ 2824.399817] __kmalloc_track_caller+0x2bc/0x400 [ 2824.404484] ? kvasprintf_const+0x55/0x180 [ 2824.408716] kvasprintf+0xa8/0x100 [ 2824.412252] ? bust_spinlocks+0xc0/0xc0 [ 2824.416225] kvasprintf_const+0x55/0x180 [ 2824.420287] kobject_set_name_vargs+0x56/0x150 [ 2824.424866] device_create_groups_vargs+0x1a2/0x250 [ 2824.429881] device_create_vargs+0x3a/0x50 [ 2824.434115] bdi_register_va.part.0+0x35/0x650 [ 2824.438697] bdi_register+0x101/0x110 [ 2824.442498] ? bdi_register_va+0x80/0x80 [ 2824.446562] ? vsnprintf+0x260/0x1340 [ 2824.450357] bdi_register_owner+0x59/0xf0 [ 2824.454506] device_add_disk+0x5bb/0xdc0 [ 2824.458569] ? sprintf+0xa7/0xd0 [ 2824.461929] ? blk_alloc_devt+0x310/0x310 [ 2824.466076] ? __lockdep_init_map+0x100/0x560 [ 2824.470566] ? __lockdep_init_map+0x100/0x560 [ 2824.475080] nbd_dev_add+0x60e/0x800 [ 2824.478802] ? nbd_send_cmd+0x11f0/0x11f0 [ 2824.482941] ? ns_capable_common+0x127/0x150 [ 2824.487345] nbd_genl_connect+0x3a4/0x13e0 [ 2824.491575] ? lock_acquire+0x170/0x3f0 [ 2824.495547] ? nbd_xmit_timeout+0x500/0x500 [ 2824.499865] ? validate_nla+0x192/0x5e0 [ 2824.503838] ? nla_parse+0x157/0x1f0 [ 2824.507558] genl_family_rcv_msg+0x572/0xb20 [ 2824.511970] ? genl_rcv+0x40/0x40 [ 2824.515425] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2824.520872] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2824.525970] ? trace_hardirqs_on+0x10/0x10 [ 2824.530223] genl_rcv_msg+0xaf/0x140 [ 2824.533930] netlink_rcv_skb+0x125/0x390 [ 2824.537990] ? genl_family_rcv_msg+0xb20/0xb20 [ 2824.542565] ? netlink_ack+0x9a0/0x9a0 [ 2824.546445] ? lock_acquire+0x170/0x3f0 [ 2824.550419] genl_rcv+0x24/0x40 [ 2824.553692] netlink_unicast+0x437/0x610 [ 2824.557750] ? netlink_sendskb+0xd0/0xd0 [ 2824.561805] ? __check_object_size+0x179/0x230 [ 2824.566379] netlink_sendmsg+0x648/0xbc0 [ 2824.570434] ? nlmsg_notify+0x1b0/0x1b0 [ 2824.574397] ? kernel_recvmsg+0x210/0x210 [ 2824.578538] ? security_socket_sendmsg+0x83/0xb0 [ 2824.583326] ? nlmsg_notify+0x1b0/0x1b0 [ 2824.587288] sock_sendmsg+0xb5/0x100 [ 2824.591002] ___sys_sendmsg+0x6c8/0x800 [ 2824.594972] ? get_pid_task+0x91/0x130 [ 2824.598859] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2824.603610] ? lock_downgrade+0x740/0x740 [ 2824.607755] ? __fget+0x23e/0x3e0 [ 2824.611206] ? lock_acquire+0x170/0x3f0 [ 2824.615174] ? lock_downgrade+0x740/0x740 [ 2824.619319] ? __fdget+0x19b/0x1f0 [ 2824.622852] ? sockfd_lookup_light+0xb2/0x160 [ 2824.627340] __sys_sendmsg+0xa3/0x120 [ 2824.631138] ? SyS_shutdown+0x160/0x160 [ 2824.635105] ? wait_for_completion_io+0x10/0x10 [ 2824.639779] ? SyS_read+0x210/0x210 [ 2824.643409] SyS_sendmsg+0x27/0x40 [ 2824.646946] ? __sys_sendmsg+0x120/0x120 [ 2824.650997] do_syscall_64+0x1d5/0x640 [ 2824.654898] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2824.660081] RIP: 0033:0x7f56575860a9 [ 2824.663778] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2824.671477] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2824.678733] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2824.685995] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.693281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.700541] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2824.745843] kasan: CONFIG_KASAN_INLINE enabled [ 2824.750733] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2824.758320] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2824.764539] Modules linked in: [ 2824.767724] CPU: 0 PID: 24839 Comm: syz-executor.2 Not tainted 4.14.302-syzkaller #0 [ 2824.775588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2824.784931] task: ffff888096e9a2c0 task.stack: ffff88806f718000 [ 2824.791036] RIP: 0010:sysfs_do_create_link_sd+0x56/0x120 [ 2824.796474] RSP: 0018:ffff88806f71f4e0 EFLAGS: 00010202 [ 2824.801828] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 00000000000069c4 [ 2824.809086] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000040 [ 2824.816345] RBP: ffffffff87cbd660 R08: ffffffff8b9d8920 R09: 00000000000400ca [ 2824.823608] R10: ffff888096e9abc0 R11: ffff888096e9a2c0 R12: ffff8880aea0c2a0 [ 2824.830958] R13: ffffffff87cbd660 R14: 0000000000000001 R15: ffff8880ab53551c [ 2824.838218] FS: 00007f5655af8700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 2824.846557] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2824.852430] CR2: 00007fd86e62b000 CR3: 000000009bd8f000 CR4: 00000000003406f0 [ 2824.859698] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2824.866975] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2824.874234] Call Trace: [ 2824.876819] sysfs_create_link+0x5f/0xc0 [ 2824.880874] device_add_disk+0x9f8/0xdc0 [ 2824.884928] ? sprintf+0xa7/0xd0 [ 2824.888282] ? blk_alloc_devt+0x310/0x310 [ 2824.892425] ? __lockdep_init_map+0x100/0x560 [ 2824.896909] ? __lockdep_init_map+0x100/0x560 [ 2824.901400] nbd_dev_add+0x60e/0x800 [ 2824.905103] ? nbd_send_cmd+0x11f0/0x11f0 [ 2824.909242] ? ns_capable_common+0x127/0x150 [ 2824.913644] nbd_genl_connect+0x3a4/0x13e0 [ 2824.917870] ? lock_acquire+0x170/0x3f0 [ 2824.921840] ? nbd_xmit_timeout+0x500/0x500 [ 2824.926153] ? validate_nla+0x192/0x5e0 [ 2824.930120] ? nla_parse+0x157/0x1f0 [ 2824.933860] genl_family_rcv_msg+0x572/0xb20 [ 2824.938259] ? genl_rcv+0x40/0x40 [ 2824.941714] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 2824.947156] ? __kmalloc_node_track_caller+0x4c/0x70 [ 2824.952248] ? trace_hardirqs_on+0x10/0x10 [ 2824.956473] genl_rcv_msg+0xaf/0x140 [ 2824.960180] netlink_rcv_skb+0x125/0x390 [ 2824.964227] ? genl_family_rcv_msg+0xb20/0xb20 [ 2824.968798] ? netlink_ack+0x9a0/0x9a0 [ 2824.972761] ? lock_acquire+0x170/0x3f0 [ 2824.976737] genl_rcv+0x24/0x40 [ 2824.980007] netlink_unicast+0x437/0x610 [ 2824.984062] ? netlink_sendskb+0xd0/0xd0 [ 2824.988113] ? __check_object_size+0x179/0x230 [ 2824.992688] netlink_sendmsg+0x648/0xbc0 [ 2824.996746] ? nlmsg_notify+0x1b0/0x1b0 [ 2825.000706] ? kernel_recvmsg+0x210/0x210 [ 2825.004844] ? security_socket_sendmsg+0x83/0xb0 [ 2825.009589] ? nlmsg_notify+0x1b0/0x1b0 [ 2825.013550] sock_sendmsg+0xb5/0x100 [ 2825.017253] ___sys_sendmsg+0x6c8/0x800 [ 2825.021219] ? get_pid_task+0x91/0x130 [ 2825.025098] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 2825.029846] ? lock_downgrade+0x740/0x740 [ 2825.034011] ? __fget+0x23e/0x3e0 [ 2825.037458] ? lock_acquire+0x170/0x3f0 [ 2825.041417] ? lock_downgrade+0x740/0x740 [ 2825.045560] ? __fdget+0x19b/0x1f0 [ 2825.049088] ? sockfd_lookup_light+0xb2/0x160 [ 2825.053575] __sys_sendmsg+0xa3/0x120 [ 2825.057363] ? SyS_shutdown+0x160/0x160 [ 2825.061326] ? wait_for_completion_io+0x10/0x10 [ 2825.065987] ? SyS_read+0x210/0x210 [ 2825.069600] SyS_sendmsg+0x27/0x40 [ 2825.073127] ? __sys_sendmsg+0x120/0x120 [ 2825.077177] do_syscall_64+0x1d5/0x640 [ 2825.081082] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2825.086260] RIP: 0033:0x7f56575860a9 [ 2825.089955] RSP: 002b:00007f5655af8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2825.097658] RAX: ffffffffffffffda RBX: 00007f56576a5f80 RCX: 00007f56575860a9 [ 2825.105001] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2825.112258] RBP: 00007f5655af81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2825.119518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2825.126775] R13: 00007ffcbf5a768f R14: 00007f5655af8300 R15: 0000000000022000 [ 2825.134033] Code: 84 a1 00 00 00 e8 1b 4d b1 ff 48 c7 c7 c0 d8 04 89 e8 af b9 80 05 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 00 00 00 4c 8b 6b 30 4d 85 ed 74 4f e8 e2 [ 2825.153192] RIP: sysfs_do_create_link_sd+0x56/0x120 RSP: ffff88806f71f4e0 [ 2825.160170] ---[ end trace f724fcd54be478b1 ]--- [ 2825.164945] Kernel panic - not syncing: Fatal exception [ 2825.170505] Kernel Offset: disabled [ 2825.174112] Rebooting in 86400 seconds..