0x7f0000000000)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 06:11:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee00) syz_open_procfs(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)={0x0, 0xfb, 0xe8, 0x6, 0x1f, "6005e706083922a6f81454b0ddc6f003", "aa0095dc2fa0c257add25ad804cf9e009bf8b859817a83d1535d15cd77eed03adfbf2c015f5e21a159ed0eac36409561fc5614e4410b87e01c55e9dedca2d67581d3de87e0b772601b592a03afbf214552f9f0a91a78d1c4ae4b2f9268426ee5bc0aa62b2a7050efa7eeeae669804a845eb12f8ea5e91637626dffaca49e780d4f7c7a89f4b734f7dcedb871429ea8acfe3295435034a8a9299f1f2244f69ce5327ec8303d80d713d22977039db4e7caa97dbc7c5c739bdcb547ea24a1b91de0730fde6471f7830e2228ed8ebdd93fca3bdd6c"}, 0xe8, 0x1) 06:11:53 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x62) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x8ebc, 0xeb) setresuid(0x0, 0xee01, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 06:11:53 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x1) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x7}], 0xc001, &(0x7f0000000080)={[{@shortname_lower}, {@numtail}]}) [ 391.025411] loop4: detected capacity change from 0 to 2048 [ 391.040800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 391.045189] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal 06:11:53 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 391.083638] loop7: detected capacity change from 0 to 8192 06:11:53 executing program 6: syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) [ 391.095661] EXT4-fs (loop7): failed to parse options in superblock: n 06:11:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 06:11:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x70}}, 0x0) [ 391.104554] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 391.130700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 391.137655] syz-executor.2: attempt to access beyond end of device [ 391.137655] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 391.149768] FAT-fs (loop2): unable to read boot sector [ 391.174000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 06:11:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002cc0)={0x1, &(0x7f00000015c0)=[{0x0, 0x9}]}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), 0x0, 0x0, 0x1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 06:11:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee00) syz_open_procfs(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)={0x0, 0xfb, 0xe8, 0x6, 0x1f, "6005e706083922a6f81454b0ddc6f003", "aa0095dc2fa0c257add25ad804cf9e009bf8b859817a83d1535d15cd77eed03adfbf2c015f5e21a159ed0eac36409561fc5614e4410b87e01c55e9dedca2d67581d3de87e0b772601b592a03afbf214552f9f0a91a78d1c4ae4b2f9268426ee5bc0aa62b2a7050efa7eeeae669804a845eb12f8ea5e91637626dffaca49e780d4f7c7a89f4b734f7dcedb871429ea8acfe3295435034a8a9299f1f2244f69ce5327ec8303d80d713d22977039db4e7caa97dbc7c5c739bdcb547ea24a1b91de0730fde6471f7830e2228ed8ebdd93fca3bdd6c"}, 0xe8, 0x1) [ 391.181008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.200105] syz-executor.2: attempt to access beyond end of device [ 391.200105] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 391.205287] FAT-fs (loop2): unable to read boot sector 06:11:53 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 06:11:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) [ 391.259411] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 06:11:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) pread64(r1, &(0x7f0000000040)=""/238, 0xee, 0x3) pread64(r0, 0x0, 0x0, 0x0) [ 391.272154] loop4: detected capacity change from 0 to 2048 06:11:53 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fd, 0xfcd, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8000, &(0x7f0000000200)=0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/71, 0x47}, {&(0x7f00000000c0)=""/123, 0x7b}], 0x2) [ 391.278079] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 391.281294] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 391.701196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.703073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:12:03 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000040)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140be0ffffff09140b2a3a0843451c0100ed000000000000ed66", 0x7a, 0xb800}], 0x0, &(0x7f0000011700)=ANY=[@ANYBLOB='\t']) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) 06:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) 06:12:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 06:12:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee00) syz_open_procfs(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)={0x0, 0xfb, 0xe8, 0x6, 0x1f, "6005e706083922a6f81454b0ddc6f003", "aa0095dc2fa0c257add25ad804cf9e009bf8b859817a83d1535d15cd77eed03adfbf2c015f5e21a159ed0eac36409561fc5614e4410b87e01c55e9dedca2d67581d3de87e0b772601b592a03afbf214552f9f0a91a78d1c4ae4b2f9268426ee5bc0aa62b2a7050efa7eeeae669804a845eb12f8ea5e91637626dffaca49e780d4f7c7a89f4b734f7dcedb871429ea8acfe3295435034a8a9299f1f2244f69ce5327ec8303d80d713d22977039db4e7caa97dbc7c5c739bdcb547ea24a1b91de0730fde6471f7830e2228ed8ebdd93fca3bdd6c"}, 0xe8, 0x1) 06:12:03 executing program 2: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x13, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40041) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) 06:12:03 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) 06:12:03 executing program 3: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x20008050) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x204840, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @hci={0x1f, 0x0, 0x4}, @tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, @l2, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x4}) clock_gettime(0x0, &(0x7f0000001200)) recvmmsg(r0, &(0x7f0000001140), 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a4, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff40}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "117650246d7393acfa9e2cedebe770e6b9b346a2165bff80c023c20f9fda03535562"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "54d66d8e52cade449174e69c656473fa789974e0a64edc88"}}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf94}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfe2b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb2b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x818}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff2ac}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb55e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ec0)='./cgroup/syz0\x00', 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000025c0)={0x0, 0x0}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002600), 0xa00, 0x0) 06:12:03 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 401.009704] loop7: detected capacity change from 0 to 184 [ 401.025284] iso9660: Unknown parameter ' ' 06:12:03 executing program 2: timer_create(0x3, &(0x7f0000000000)={0x0, 0x38, 0x2}, &(0x7f0000000080)=0x0) timer_getoverrun(r0) timer_settime(r0, 0x0, &(0x7f00000010c0)={{0x77359400}}, &(0x7f0000001100)) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000001140)={0x40000700, 0x0, &(0x7f0000000040), 0x0, {}, &(0x7f00000000c0)=""/4095, 0xfff, 0x0, 0x0}, 0x58) 06:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) [ 401.053291] loop4: detected capacity change from 0 to 2048 [ 401.074219] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 401.082349] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 401.085192] loop7: detected capacity change from 0 to 184 [ 401.089934] iso9660: Unknown parameter ' ' 06:12:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) 06:12:03 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) 06:12:03 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:03 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000023c0)=0x24) 06:12:13 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000000}) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)={[{@fat=@tz_utc}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x200, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) 06:12:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:12:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee00) syz_open_procfs(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 06:12:13 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x23, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32383337383038363200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e883faa764e6453ab2efc3f3d55b247d010000000c00000000000000dff4655f00"/64, 0xfffffffffffffdac, 0x4e0}, {&(0x7f0000010200)="0100000000000500080000000000000000000000040000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000029000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010500)="ff3f0c00fc010000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x1080, 0x2000}, {&(0x7f0000000080)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x4000}, {&(0x7f0000011700)='\x00'/21, 0x15, 0x5000}, {&(0x7f0000011800)="00000000001000"/32, 0x20, 0x6000}, {&(0x7f0000011900)="00000000001000"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x400000008000}, {&(0x7f0000011b00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x9000}, {&(0x7f0000011c00)="0200"/32, 0x20, 0x9400}, {&(0x7f0000000580)="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", 0x2c2, 0x9800}, {&(0x7f0000011e00)="0400"/32, 0x20, 0x9c00}, {&(0x7f0000011f00)="0500"/32, 0x20, 0xa000}, {&(0x7f0000012000)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000d000"/96, 0x60, 0xa3fc}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xb000}, {&(0x7f0000012200)="0200"/32, 0x20, 0xb400}, {&(0x7f0000012300)="0300"/32, 0x20, 0xb800}, {&(0x7f0000012400)="0400"/32, 0x20, 0xedc}, {&(0x7f0000012500)="0500"/32, 0x20, 0xc000}, {&(0x7f0000012600)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000d000"/96, 0x60, 0xc400}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0xd000}, {&(0x7f0000012800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000002ea0100000001000000270f240c000000000000000000000000000000000601f80f0000000006000000779b539778617474723100000601f00f00000000060000007498539778617474723200"/4192, 0x1060, 0x12000}, {&(0x7f0000013900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x13fe0}, {&(0x7f0000013a00)="0000000000000000dff4655fdff4655fdff4655f00"/32, 0x20, 0x22000}, {&(0x7f0000013b00)="ed41000000100000dff4655fe0f4655fe0f4655f00000000000004000800000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x22080}, {&(0x7f0000013c00)="8081000000180000dff4655fdff4655fdff4655f00000000000001001000000010000800000000000af301000400000000000000000000000200000009000000", 0x40, 0x22100}, {&(0x7f0000013d00)="8081000000180000dff4655fdff4655fdff4655f00000000000001001000000010000800000000000af30100040000000000000000000000020000000b000000", 0x40, 0x22180}, {&(0x7f0000000040)="c041000000400000dff4655fdff4655fdff4655f00000000000002002000000000000800000000000af701000400000000000000000000000400000004000000", 0x40, 0x22500}, {&(0x7f0000013f00)="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"/768, 0x300, 0x22580}, {&(0x7f0000014200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x23000}, {&(0x7f0000000140)="73797a6b616c6c65727300000000000000000000000000000000000000000000ef85ae32498624ca7bea632fbf540001be3017404ad6ffb42b8848c120e5d7f5e58dad8a603f73c04326b06595a7680897cb753067fd23b70838083fd92fcc50c61dbf8cfa83bcd448d40b4dcff08a1c34f9faac2c86806d3757406539d7f93a06a45d4d647a9928bcf1bde2065a8112f172898a0bff83f3fac31e16b2c6c1916c37f5e3a418881076b2dc", 0xab, 0x24000}, {&(0x7f0000014800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000014900)) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) recvmmsg(r3, &(0x7f0000004900)=[{{&(0x7f0000000940)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000000a80)=""/28, 0x1c}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/18, 0x12}], 0x6, &(0x7f0000001bc0)=""/253, 0xfd}, 0x7f}, {{&(0x7f0000001cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001d40)=""/240, 0xf0}, {&(0x7f0000001e40)=""/145, 0x91}, {&(0x7f0000001f00)=""/184, 0xb8}, {&(0x7f0000001fc0)=""/133, 0x85}, {&(0x7f0000002080)=""/171, 0xab}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x6, &(0x7f00000031c0)=""/99, 0x63}}, {{&(0x7f0000003240)=@un=@abs, 0x80, &(0x7f0000004780)=[{&(0x7f00000032c0)=""/146, 0x92}, {&(0x7f0000003380)=""/89, 0x59}, {&(0x7f0000003400)=""/206, 0xce}, {&(0x7f0000003500)=""/179, 0xb3}, {&(0x7f00000035c0)=""/151, 0x97}, {&(0x7f0000003680)=""/89, 0x59}, {&(0x7f0000003700)=""/72, 0x48}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x8, &(0x7f0000004800)=""/232, 0xe8}, 0x3c}], 0x3, 0x100, 0x0) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000900)={{r1, r2/1000+60000}, {r4, r5/1000+60000}}, 0x0) 06:12:13 executing program 7: r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000080)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 06:12:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) 06:12:13 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:12:13 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) 06:12:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) [ 411.656429] loop4: detected capacity change from 0 to 2048 [ 411.661304] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 411.662631] No source specified [ 411.662999] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 411.718556] No source specified 06:12:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee00) syz_open_procfs(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 06:12:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) 06:12:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x4c}}, 0x0) 06:12:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) 06:12:13 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:14 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x1) clone3(&(0x7f0000001fc0)={0x10000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x33, 0x0, 0x0, 0x12, {r0}}, 0x58) [ 411.875369] loop4: detected capacity change from 0 to 2048 [ 411.888175] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 411.892538] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal 06:12:14 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff}, 0x20) 06:12:14 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) [ 412.255864] loop2: detected capacity change from 0 to 264192 [ 412.590927] loop2: detected capacity change from 0 to 264192 [ 412.594215] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 06:12:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x4c}}, 0x0) 06:12:23 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040), 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x7a, 0x0, 0xc0, 0x0, 0x7, 0x198a, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x4}, 0x3080, 0x10000, 0x6, 0x3, 0x5, 0x5, 0x0, 0x0, 0x8, 0x0, 0xe3}, r0, 0x7, r1, 0x0) clone3(&(0x7f00000002c0)={0x89800100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 06:12:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff}, 0x20) 06:12:23 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:12:23 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x4c}}, 0x0) 06:12:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee00) syz_open_procfs(0x0, 0x0) 06:12:23 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in=@remote, 0x4e23, 0xf481, 0x4e22, 0x8001, 0x2, 0xc0, 0x20, 0xae}, {0x7fff, 0x727, 0x0, 0xffffffff80000001, 0x2, 0x97e, 0x1, 0x3f}, {0x8001, 0x9, 0x8, 0x2}, 0x7f, 0x6e6bba, 0x2, 0x0, 0x3}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x3504, 0x3, 0x1, 0x9, 0x308a, 0x8, 0x3f}}, 0xe8) [ 421.856365] loop4: detected capacity change from 0 to 2048 [ 421.866968] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 421.871386] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal 06:12:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x1) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f00000003c0)={0x6f, 0x8, 0x80, 0x81, 0xfc, 0x6}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 06:12:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x4c}}, 0x0) 06:12:24 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff}, 0x20) 06:12:24 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) [ 422.000201] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 422.054952] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 06:12:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040), 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x7a, 0x0, 0xc0, 0x0, 0x7, 0x198a, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x4}, 0x3080, 0x10000, 0x6, 0x3, 0x5, 0x5, 0x0, 0x0, 0x8, 0x0, 0xe3}, r0, 0x7, r1, 0x0) clone3(&(0x7f00000002c0)={0x89800100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 06:12:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x4c}}, 0x0) 06:12:33 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x10e) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) 06:12:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 1) 06:12:33 executing program 7: openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x301bc1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_cypress', 0x1, 0x0) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x8100) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), 0x0, 0x0, 0x1) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x80) clone3(&(0x7f0000000080)={0x320801100, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x511080) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f00000001c0)) 06:12:33 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:33 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:12:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee00) [ 430.987589] loop4: detected capacity change from 0 to 2048 [ 430.999452] FAULT_INJECTION: forcing a failure. [ 430.999452] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 431.001326] CPU: 1 UID: 0 PID: 6324 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 431.001359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.001373] Call Trace: [ 431.001381] [ 431.001391] dump_stack_lvl+0xfa/0x120 [ 431.001453] should_fail_ex+0x4d7/0x5e0 [ 431.001493] _copy_from_user+0x30/0xd0 [ 431.001522] copy_from_sockptr_offset.constprop.0+0x167/0x1a0 [ 431.001560] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 431.001607] do_ipv6_setsockopt+0xbd2/0x4800 [ 431.001648] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 431.001703] ? lock_acquire+0xdf/0x2e0 [ 431.001735] ? get_pid_task+0x29/0x250 [ 431.001770] ? find_held_lock+0x2b/0x80 [ 431.001803] ? get_pid_task+0xfd/0x250 [ 431.001837] ? lock_release+0xc8/0x290 [ 431.001866] ? get_pid_task+0x107/0x250 [ 431.001901] ? proc_fail_nth_write+0x98/0x250 [ 431.001940] ? sock_has_perm+0x21d/0x2b0 [ 431.001969] ? __pfx_sock_has_perm+0x10/0x10 [ 431.002004] ipv6_setsockopt+0xcb/0x170 [ 431.002041] rawv6_setsockopt+0xc7/0x4f0 [ 431.002072] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 431.002104] ? selinux_socket_setsockopt+0x6e/0x90 [ 431.002147] ? sock_common_setsockopt+0x2f/0x110 [ 431.002188] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 431.002225] do_sock_setsockopt+0xf7/0x1e0 [ 431.002267] __sys_setsockopt+0x11f/0x1a0 [ 431.002302] __x64_sys_setsockopt+0xbe/0x160 [ 431.002332] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 431.002370] do_syscall_64+0xbf/0x360 [ 431.002395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.002420] RIP: 0033:0x7fc5b550bb19 [ 431.002438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.002461] RSP: 002b:00007fc5b2a81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.002485] RAX: ffffffffffffffda RBX: 00007fc5b561ef60 RCX: 00007fc5b550bb19 [ 431.002501] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 431.002515] RBP: 00007fc5b2a811d0 R08: 0000000000000020 R09: 0000000000000000 [ 431.002530] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 431.002545] R13: 00007fff5f45790f R14: 00007fc5b2a81300 R15: 0000000000022000 [ 431.002576] [ 431.056991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 431.060092] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal 06:12:33 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x4c}}, 0x0) 06:12:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 2) 06:12:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x4c}}, 0x0) [ 431.198416] FAULT_INJECTION: forcing a failure. [ 431.198416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.199453] CPU: 0 UID: 0 PID: 6338 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 431.199470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.199477] Call Trace: [ 431.199482] [ 431.199487] dump_stack_lvl+0xfa/0x120 [ 431.199512] should_fail_ex+0x4d7/0x5e0 [ 431.199533] _copy_from_user+0x30/0xd0 [ 431.199548] copy_from_sockptr_offset+0x14e/0x180 [ 431.199562] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 431.199573] ? register_lock_class+0x41/0x560 [ 431.199594] ipv6_flowlabel_opt+0xd6/0x2e60 [ 431.199611] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 431.199623] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 431.199643] ? do_raw_spin_lock+0x123/0x260 [ 431.199658] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 431.199675] ? mark_held_locks+0x49/0x80 [ 431.199690] do_ipv6_setsockopt+0x19ec/0x4800 [ 431.199715] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 431.199740] ? lock_acquire+0xdf/0x2e0 [ 431.199751] ? get_pid_task+0x29/0x250 [ 431.199770] ? find_held_lock+0x2b/0x80 [ 431.199787] ? get_pid_task+0xfd/0x250 [ 431.199803] ? lock_release+0xc8/0x290 [ 431.199817] ? get_pid_task+0x107/0x250 [ 431.199834] ? proc_fail_nth_write+0x98/0x250 [ 431.199854] ? sock_has_perm+0x21d/0x2b0 [ 431.199869] ? __pfx_sock_has_perm+0x10/0x10 [ 431.199886] ipv6_setsockopt+0xcb/0x170 [ 431.199904] rawv6_setsockopt+0xc7/0x4f0 [ 431.199919] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 431.199935] ? selinux_socket_setsockopt+0x6e/0x90 [ 431.199948] ? sock_common_setsockopt+0x2f/0x110 [ 431.199971] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 431.199988] do_sock_setsockopt+0xf7/0x1e0 [ 431.200010] __sys_setsockopt+0x11f/0x1a0 [ 431.200028] __x64_sys_setsockopt+0xbe/0x160 [ 431.200042] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 431.200060] do_syscall_64+0xbf/0x360 [ 431.200073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.200086] RIP: 0033:0x7fc5b550bb19 [ 431.200095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.200106] RSP: 002b:00007fc5b2a81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.200118] RAX: ffffffffffffffda RBX: 00007fc5b561ef60 RCX: 00007fc5b550bb19 [ 431.200126] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 431.200136] RBP: 00007fc5b2a811d0 R08: 0000000000000020 R09: 0000000000000000 [ 431.200144] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 431.200151] R13: 00007fff5f45790f R14: 00007fc5b2a81300 R15: 0000000000022000 [ 431.200167] 06:12:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x4c}}, 0x0) 06:12:33 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee00) [ 431.260232] loop4: detected capacity change from 0 to 2048 [ 431.269137] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 431.274865] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal 06:12:33 executing program 2: syz_io_uring_setup(0x506, &(0x7f0000000280)={0x0, 0x43d4, 0x0, 0x1, 0x1dc}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x2fda, &(0x7f0000000380)={0x0, 0x2ceb, 0x4, 0x3, 0x250}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000480)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0x0, 0x0, 0xfffffff9, 0x0, 0x1}, 0x400) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7ff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38373635383433343000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffe1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), 0x0, 0x0, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) 06:12:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:12:33 executing program 4: [ 431.347584] loop4: detected capacity change from 0 to 2048 [ 431.358422] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 431.361654] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) [ 431.409587] loop2: detected capacity change from 0 to 2048 [ 431.435791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.437679] ext4 filesystem being mounted at /syzkaller-testdir476092422/syzkaller.PmMc0U/48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.516863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 06:12:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 3) 06:12:42 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}}, 0x0) 06:12:42 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:12:42 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) 06:12:42 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffeff, 0xdb88}, 0x14080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:12:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000240008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000010d00)) [ 440.487084] loop4: detected capacity change from 0 to 2048 06:12:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xbe0, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x25c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0x2}, {0x1, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x3}, {0x6, 0x6}, {0x0, 0x7}, {0x5}, {0x7, 0x2}, {0x3, 0xa}, {0x0, 0x5}, {0x5, 0x9}, {0x3, 0x1}, {0x3, 0x5}, {0x2, 0x7}, {0x4}, {0x0, 0x7}, {0x2, 0x4}, {0x4}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x48, 0x12, 0x2, 0x1, 0x2, 0x6, 0x4, 0x1, 0x4, 0x12, 0x9, 0x14, 0x12, 0xb, 0x24, 0x6, 0x30, 0x36, 0x16, 0x9, 0x60, 0x24, 0x16, 0x3, 0x1, 0x16, 0x1b, 0x1, 0x24, 0x24]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x1, 0x0, 0xc, 0x60, 0x12, 0x60, 0x48, 0x5, 0x9, 0xb, 0x6c, 0x30, 0x1b, 0x9, 0x3, 0x48, 0x16, 0x6c, 0x48, 0x6, 0x6c, 0x7d, 0x6]}]}, @NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x2}, {0x5, 0xa}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x5, 0x3}, {0x3, 0x3}, {0x2, 0x9}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x5}, {0x6, 0x2}, {0x1}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x4}, {0x7, 0x7}, {0x0, 0xa}, {0x1}, {0x5, 0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x7, 0x8}, {0x2}, {0x3, 0x8}, {0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x1}, {0x3}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x5, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x7, 0x4}, {0x7, 0x3}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x1}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x3}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x9}, {0x2, 0x2}, {0x6, 0x4}, {0x4, 0x3}, {0x2, 0x6}, {0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x2}, {0x0, 0x9}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x2, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x1}, {0x4, 0x9}, {0x7, 0x9}, {0x6, 0x5}, {0x7, 0x9}, {0x3, 0x4}, {0x7, 0x4}, {0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x7}, {0x5}, {0x0, 0x8}, {0x2, 0x9}, {0x6, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x3}, {0x4, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x2, 0xa}, {0x6, 0x6}, {0x5, 0x4}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x6, 0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x4}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x2}, {0x6, 0x7}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x6}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x60, 0xa, 0x18, 0x1, 0x36, 0x16, 0x36, 0x6c, 0x24, 0x36, 0x4, 0x9, 0x9, 0x9, 0x24, 0x24, 0x36, 0x13, 0x6, 0x24, 0x1b, 0x1, 0x5, 0x2, 0xb, 0x36, 0x12, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x66, 0x7, 0x7f, 0x5, 0x8, 0x7fff, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x6}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0x2}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x8}, {0x6}, {0x7, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x3, 0x5}, {0x4, 0x8}, {0x6}, {0x1, 0x8}, {0x6, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x7}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x5}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x0, 0x5}, {}, {0x7, 0x7}, {0x7, 0x9}, {0x4, 0x7}, {0x2, 0x5}, {0x3, 0x5}, {0x5, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x2}, {0x0, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x5, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0x4}, {0x3, 0x5}, {0x5, 0x4}, {0x5, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x5, 0x16, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x4, 0x48, 0x60, 0x2, 0x9, 0x12, 0xede4101593f3787, 0x24, 0x16, 0x1, 0x16, 0x1b, 0x1, 0x16, 0xc, 0x48, 0xc, 0x3, 0x60]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x2}, {0x7, 0x3}, {0x6, 0x8}, {0x3, 0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x5}, {0x4, 0x4}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0xa}, {0x2}, {0x1, 0x2}, {0x1}, {0x4, 0x2}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x6}, {0x5, 0x9}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x6}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0xa}, {0x3, 0x9}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0x1}, {0x7, 0x5}, {0x5, 0x4}, {0x7, 0x7}, {0x5, 0x8}, {0x0, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x3, 0x1}, {0x4, 0x6}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x9}, {0x6, 0x3}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x3}, {0x3, 0xa}, {0x7, 0x8}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x6, 0x8}, {0x5, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xa, 0x18, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x8000, 0x1ff, 0x6, 0x40, 0x0, 0x6, 0x400]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x5}, {0x6, 0xa}, {0x5, 0x4}, {0x1, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x6, 0x5}, {0x5, 0x1}, {0x6, 0x7}, {0x7, 0x3}, {0x4}, {0x7, 0x5}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0xa}, {0x3, 0x6}, {0x6}, {0x7, 0xa}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x4}, {0x5, 0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x2}, {0x6, 0x5}, {0x3, 0x6}, {0x2, 0x3}, {0x4, 0xa}, {0x5, 0x4}, {0x4, 0x6}, {0x7}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x1, 0x8}, {0x2}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x3}, {0x5, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x6, 0x8}, {0x5, 0x9}, {}, {0x6, 0x5}, {0x1, 0x1}, {0x6}, {0x3, 0x6}, {0x3, 0x7}, {0x5, 0x5}, {0x2, 0x5}, {0x3, 0x7}, {0x1, 0x2}, {0x5, 0x9}, {0x3, 0x3}, {0x1, 0x2}, {0x5, 0x9}, {0x1}, {0x6, 0x6}, {0x7}, {0x4, 0x8}, {0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0x7}]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7ff, 0x3a52, 0x1, 0x101, 0x1f, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x42, 0x6, 0x12, 0x0, 0x3, 0x2, 0x6c, 0x36, 0x9, 0x4, 0x60, 0x60, 0x6, 0x1, 0x5, 0x60, 0x24]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x7}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa88, 0x101, 0x2, 0xb3, 0xffff, 0x4, 0x6, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8569, 0x6, 0x3f, 0x7, 0x9, 0x600, 0xbe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x9}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x7}, {0x4}, {0x2, 0x3}, {0x7, 0x4}, {0x5, 0x2}, {0x2, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x410, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x8}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x3}, {0x3, 0x5}, {0x5, 0xa}, {0x0, 0x3}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x0, 0x3}, {}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x9}, {0x4, 0x9}, {0x6, 0x9}, {0x6, 0xa}, {0x4, 0x6}, {0x3, 0x3}, {0x3, 0x8}, {0x1}, {0x4, 0x9}, {0x0, 0x5}, {0x7, 0x4}, {0x2, 0x3}, {0x5, 0x1}, {0x4}, {0x7, 0x9}, {0x6, 0x4}, {0x7, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0x8}, {0x6, 0x9}, {0x5, 0xa}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x5}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaa00, 0x9, 0x3f, 0x561a, 0x4, 0xbbab, 0xc00, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x5, 0xba7ccf237c3b59b7, 0x16, 0x18, 0x36, 0xb, 0x1b, 0x36, 0x0, 0x41, 0x16, 0x3, 0x6, 0x1, 0x12, 0x1, 0x2, 0x1, 0x60, 0x1, 0x9, 0x3e]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0x6}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {0x5}, {0x4, 0x1}, {}, {0x6, 0x6}, {0x4, 0x6}, {0x6, 0x1}, {0x6, 0x3}, {0x4, 0x8}, {0x5, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x7}, {0x5}, {0x6, 0x8}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x3}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x3}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0x7}, {0x3, 0x2}, {0x5, 0x2}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0x8}, {0x3, 0x2}, {0x2}, {0x1}, {0x0, 0x8}, {0x2, 0x5}, {0x2, 0x6}, {0x3, 0x6}, {0x7, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x4}, {0x6, 0x7}, {0x4, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {}, {0x2, 0x1}, {0x6}, {0x4}, {0x2, 0x9}, {0x4, 0x2}, {0x2, 0x5}, {0x5, 0x9}, {0x3, 0x5}]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x7}, {0x4, 0x5}, {0x0, 0x1}, {0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x1}, {0x4, 0x5}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x7}, {0x4}, {0x1, 0x2}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x4}, {0x7, 0x4}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {}, {0x1, 0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x7, 0x9}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x7}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0xc}, {0x6, 0xa}, {0x4, 0x7}, {0x6, 0x8}, {0x3, 0x4}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x3}, {0x1}, {0x1, 0x9}, {}, {0x4, 0x8}, {0x1, 0x8}, {0x7, 0x2}, {0x3, 0xa}, {0x3, 0x6}, {0x7, 0x7}, {}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0xa}, {0x7, 0x7}, {0x5, 0xa}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x7, 0x8}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x7}, {0x2, 0xa}, {0x3, 0x4}, {0x5, 0x9}, {0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x17}, {0x3, 0x2}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x5}, {0x4}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x3, 0x3}, {0x6, 0xa}, {0x6, 0x3}, {0x6, 0x7}, {0x5, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x6, 0x9}, {0x4, 0x4}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2000, 0x5, 0x7fff, 0x0, 0xffff, 0xe0, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0x9}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0xa}, {0x6, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x7, 0x7}, {0x1, 0x4}, {0x2, 0x5}, {0x2, 0x2}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x4}, {0x2}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x9}, {0x3, 0x8}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {}, {0x7, 0x8}, {0x7, 0x6}, {0x4, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x9}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x4}, {0x7, 0x1}, {0x6, 0x6}, {0x5, 0xa}, {0x3, 0xa}, {0x3, 0x2}, {0x7, 0xa}, {0x1, 0x7}, {0x5, 0x5}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x8}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0x3}, {0x4, 0x4}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x5, 0x3}, {0x6, 0x6}, {0x5, 0x2}, {0x6, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x6, 0x4}, {0x0, 0x8}]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x6}, {0x4}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x5, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x7}, {0x7, 0xa}, {0x7, 0x7}, {}, {0x0, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x2, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x6, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x8}, {0x7, 0x7}, {0x7, 0x6}, {0x6}, {0x3, 0x5}, {0x1, 0x7}, {0x7, 0x5}, {0x2, 0x9}, {0x3, 0x1}, {0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x7, 0x5}, {0x7, 0x3}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0xa}, {0x5, 0x9}, {0x2, 0x3}, {0x6, 0x6}, {}, {0x2}, {0x5, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x9}, {0x6, 0x3}, {0x1, 0x4}, {0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x1, 0x5}, {0x6}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x3}, {0x3, 0xa}, {0x6, 0x8}, {0x6, 0x2}, {0x5, 0x9}, {}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x5}, {0x3, 0x9}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x6}, {0x6, 0x7}, {0x7, 0x9}, {0x2, 0x3}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x2, 0x6}, {0x1, 0xa}, {0x4, 0x9}, {0x5, 0xa}, {0x7, 0xa}, {0x2, 0x8}, {0x4, 0x8}, {0x2, 0x4}, {0x7, 0x5}, {0x5, 0x2}, {}, {0x3, 0x5}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x2}, {0x1, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0xa}, {0x3, 0x7}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0x1f, 0x80, 0x5097, 0x19b5, 0x2, 0x40]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x1}, {0x7, 0x5}, {0x7, 0x1}, {0x7}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x5, 0x24, 0x18, 0x48, 0x1b, 0x3, 0x48, 0x9, 0x30, 0x24, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x1, 0x3, 0xfffa, 0x400, 0x3, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x2e1c, 0x2c0, 0x8000, 0x3ff, 0x40, 0x8]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x6}, {0x1}, {0x6}, {0x6, 0x3}, {0x2, 0x3}, {0x7, 0x2}, {0x3, 0x3}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x3}, {0x3, 0x9}, {0x3, 0x4}, {0x7, 0x3}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x1ff, 0x6, 0xfffd, 0x31, 0xa9, 0x2800]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x3, 0x5, 0x16, 0x6, 0x18, 0x16, 0x36, 0x30, 0x1, 0x12, 0x9, 0x48, 0x36, 0x6c, 0x6c, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8, 0x9, 0xff80, 0xbda, 0x7, 0x5, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4000, 0x8, 0xffff, 0x4, 0x0, 0x0, 0x666, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x1fd, 0x8, 0x0, 0x7, 0x7ff, 0x400]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x1}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x5, 0x6}, {0x3, 0x4}, {0x3, 0x3}, {}, {0x1, 0x2}, {0x5, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x5}, {0x5}, {0x6, 0x3}, {0x2, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0x2}, {0x4}, {0x1, 0x8}, {0x3, 0xa}, {0x7}, {0x4, 0x6}, {0x0, 0x4}, {}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x8}, {}, {0x4, 0x3}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0x4}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x6, 0x8}, {0x4, 0x6}, {0x3, 0x1}, {0x0, 0x2}, {0x2, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x3e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xd5, 0x0, 0x0, 0x97b6, 0xb5fc, 0x1, 0x5]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x6}, {0x2, 0x2}, {0x4, 0x3}, {0x7, 0x7}, {0x3, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0xa}, {0x6, 0x6}, {0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0x8}, {0x7, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0xa}, {0x2, 0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x7}, {0x1, 0x3}, {0x4, 0x7}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x4}, {0x6}, {0x3, 0x6}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x1}, {0x4, 0x5}, {}, {0x2, 0x8}, {0x2, 0x5}, {0x3}, {0x6, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x6, 0x3}, {0x3, 0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x5, 0xffe1, 0x3, 0x0, 0xec, 0xfff8, 0x9e]}}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x0, 0x18, 0x3, 0x2, 0x2, 0x24, 0x12, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x24, 0x1b, 0x2, 0x24, 0x18, 0x12, 0x1, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x60bc, 0x6, 0x81, 0x8, 0x8, 0x1, 0x6, 0xfffb]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x4, 0x9}, {0x1, 0x4}, {0x5, 0x1}, {}, {0x3, 0xa}, {0x1, 0x7}, {0x1, 0x2}, {0x5}, {0x7, 0x9}, {0x5, 0x2}, {0x6, 0x5}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0x9}, {0x3, 0x7}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x5}, {0x4, 0x4}, {0x6, 0x4}, {0x5, 0x7}, {0x4, 0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x1}, {0x4, 0x5}, {0x2}, {0x0, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x9}, {0x2, 0x4}, {0x7}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x7}, {0x1, 0x1}, {0x5}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x9}, {0x5, 0x1}, {0x5, 0x8}, {0x1, 0x3}, {0x7, 0x7}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0xa}, {0x4, 0x5}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x4, 0x5}, {0x2, 0x9}, {0x7, 0x7}, {}, {0x4, 0x8}, {0x5, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x3}, {0x0, 0x8}, {0x4, 0x1}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0xa}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x8}, {0x4, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x3}, {0x4, 0x7}, {0x5, 0x9}, {0x7, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x5, 0x7}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x4}, {0x3}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x4, 0x9}, {0x2, 0x9}, {0x5, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x4, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x8000, 0x2, 0x11b, 0x0, 0xfff9, 0x1]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0xa}, {0x7, 0x1}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x9}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x3, 0x3}, {0x7}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x6, 0x1}, {0x5, 0x3}, {0x3, 0x3}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0x7, 0x1}, {0x4, 0x2}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x3, 0x4}, {0x4, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x3, 0x9}, {0x0, 0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x1e}, {0x4, 0x9}, {0x6, 0x3}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x3}, {0x1, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0x7}, {0x1}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x3, 0x4}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x8}, {0x5, 0xa}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x7, 0x4}, {0x2, 0x4}, {0x5}, {0x7, 0x7}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x7}, {0x1, 0x3}, {0x3}, {0x4, 0x4}, {0x2, 0x9}, {0x5, 0x5}, {0x0, 0x8}, {0x7}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x4}, {}, {0x7, 0x7}, {0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x5}, {0x5, 0xa}, {0x7, 0xa}, {0x1, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x1}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x4, 0x9}, {0x3, 0x6}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x5, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x19}, {0x3, 0xc}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0x2}, {0x3, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x2, 0x18, 0x5, 0x4, 0x18, 0x36, 0x1, 0x36, 0x1, 0x9, 0x60, 0x24, 0xb, 0xb, 0x2, 0x9, 0x60, 0x2, 0x48, 0x16, 0x9, 0x5, 0x30, 0x2, 0x18, 0x0, 0x30, 0x1b, 0xc, 0x16]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x40, 0x2, 0x4, 0x0, 0x3, 0x9, 0x2c64]}}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe03, 0x5, 0xfffd, 0x238a, 0x1, 0x7, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x400, 0x8000, 0x400, 0xd39, 0xc2, 0x5, 0xb8]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x8}, {0x0, 0x7}, {0x1, 0x8}, {0x4, 0x7}, {0x4, 0x8}, {0x3, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x7}, {0x4, 0x6}, {0x5, 0x2}, {0x7, 0x2}, {0x5}, {0x5, 0x1}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x2}, {0x3}, {0x3, 0x9}, {0x4}, {0x7, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x5}, {0x7, 0x2}, {0x6, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x5, 0x7}, {0x5, 0xa}, {0x6, 0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x439, 0x26fb, 0x3, 0x923, 0x6da, 0x5, 0x8]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0xa}, {0x7, 0x9}, {0x3}, {0x5, 0x6}, {0x1, 0xa}, {0x2, 0x4}, {0x4, 0x8}, {0x6, 0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x2, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x6}, {0x0, 0x1}, {0x6, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x5}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x4}, {0x2, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x4, 0x1}, {0x1}, {0x6, 0x4}, {0x3, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x9}, {0x3, 0x3}, {0x3}, {0x7, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x7}, {}, {0x6, 0x5}, {0x3, 0x8}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x48c1, 0x100, 0x85e6, 0x8, 0xffff, 0xe7db, 0xfff, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x893a, 0x70f, 0xa3, 0x0, 0x5, 0x7ff, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x7}, {0x1}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x3}, {0x1, 0x8}, {0x5, 0xa}, {0x3, 0x7}, {0x2, 0x4}, {0x5}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x7}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x8}, {0x0, 0x3}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x1}, {0x2, 0x2}, {0x7, 0x5}, {0x5, 0x5}, {0x4, 0x9}, {0x3}, {0x6, 0x2}, {0x5, 0x4}, {0x6, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0xa}, {0x2}, {0x4, 0x1}, {0x4, 0x3}, {0x4, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x1000, 0x8, 0x2, 0x1, 0xbc6, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0xbe0}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000040), 0x0, 0x0, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000e80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x801}, 0x14}}, 0x0) [ 440.519525] FAULT_INJECTION: forcing a failure. [ 440.519525] name failslab, interval 1, probability 0, space 0, times 1 [ 440.521772] CPU: 1 UID: 0 PID: 6374 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 440.521814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 440.521830] Call Trace: [ 440.521839] [ 440.521849] dump_stack_lvl+0xfa/0x120 [ 440.521898] should_fail_ex+0x4d7/0x5e0 [ 440.521942] should_failslab+0xc2/0x120 [ 440.521969] __kmalloc_cache_noprof+0x73/0x4a0 [ 440.522002] ? __lock_acquire+0x694/0x1b70 [ 440.522034] ? fl_create+0x105/0xc30 [ 440.522065] ? fl_create+0x105/0xc30 [ 440.522088] fl_create+0x105/0xc30 [ 440.522118] ? __pfx_fl_create+0x10/0x10 [ 440.522145] ? lock_acquire+0xdf/0x2e0 [ 440.522171] ? __might_fault+0xe0/0x190 [ 440.522199] ? find_held_lock+0x2b/0x80 [ 440.522256] ? __might_fault+0x138/0x190 [ 440.522287] ? lock_release+0xc8/0x290 [ 440.522314] ? __might_fault+0xe0/0x190 [ 440.522346] ? _copy_from_user+0x5b/0xd0 [ 440.522377] ? copy_from_sockptr_offset+0xea/0x180 [ 440.522404] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 440.522429] ? register_lock_class+0x41/0x560 [ 440.522467] ipv6_flowlabel_opt+0x57c/0x2e60 [ 440.522504] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 440.522532] ? do_raw_spin_lock+0x123/0x260 [ 440.522565] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 440.522603] ? mark_held_locks+0x49/0x80 [ 440.522636] do_ipv6_setsockopt+0x19ec/0x4800 [ 440.522683] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 440.522746] ? lock_acquire+0xdf/0x2e0 [ 440.522772] ? get_pid_task+0x29/0x250 [ 440.522810] ? find_held_lock+0x2b/0x80 [ 440.522845] ? get_pid_task+0xfd/0x250 [ 440.522882] ? lock_release+0xc8/0x290 [ 440.522913] ? get_pid_task+0x107/0x250 [ 440.522951] ? proc_fail_nth_write+0x98/0x250 [ 440.522995] ? sock_has_perm+0x21d/0x2b0 [ 440.523026] ? __pfx_sock_has_perm+0x10/0x10 [ 440.523067] ipv6_setsockopt+0xcb/0x170 [ 440.523107] rawv6_setsockopt+0xc7/0x4f0 [ 440.523141] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 440.523176] ? selinux_socket_setsockopt+0x6e/0x90 [ 440.523207] ? sock_common_setsockopt+0x2f/0x110 [ 440.523252] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 440.523292] do_sock_setsockopt+0xf7/0x1e0 [ 440.523337] __sys_setsockopt+0x11f/0x1a0 [ 440.523377] __x64_sys_setsockopt+0xbe/0x160 [ 440.523408] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 440.523450] do_syscall_64+0xbf/0x360 [ 440.523477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.523504] RIP: 0033:0x7fc5b550bb19 [ 440.523524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 440.523549] RSP: 002b:00007fc5b2a81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 440.523574] RAX: ffffffffffffffda RBX: 00007fc5b561ef60 RCX: 00007fc5b550bb19 [ 440.523592] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 440.523610] RBP: 00007fc5b2a811d0 R08: 0000000000000020 R09: 0000000000000000 [ 440.523626] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 440.523642] R13: 00007fff5f45790f R14: 00007fc5b2a81300 R15: 0000000000022000 [ 440.523677] 06:12:42 executing program 3: r0 = syz_io_uring_setup(0x2bc1, &(0x7f0000000080)={0x0, 0x51, 0x2, 0x3, 0x37c}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3, 0x20, 0x800, 0x281, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) io_uring_setup(0x3fcd, &(0x7f0000000140)={0x0, 0x6f80}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = syz_io_uring_setup(0x4890, &(0x7f00000004c0)={0x0, 0x42ca, 0x1, 0x1, 0x350}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000600), &(0x7f0000000640)='.\x00', 0x0, 0x3, &(0x7f0000000980)=[{&(0x7f0000000680)='B', 0x1, 0x7}, {0x0}, {0x0, 0x0, 0xeac}], 0x9a0050, &(0x7f0000000a00)={[], [{@obj_role={'obj_role', 0x3d, '\''}}, {@smackfsdef={'smackfsdef', 0x3d, 'cgroup.subtree_control\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'cgroup.subtree_control\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 06:12:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}}, 0x0) [ 440.601376] loop2: detected capacity change from 0 to 1 06:12:42 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) [ 440.620554] loop4: detected capacity change from 0 to 2048 [ 440.623554] loop3: detected capacity change from 0 to 14 [ 440.623666] FAT-fs (loop2): Directory bread(block 3) failed [ 440.628874] FAT-fs (loop2): Directory bread(block 4) failed [ 440.631219] FAT-fs (loop2): Directory bread(block 5) failed [ 440.635530] FAT-fs (loop2): Directory bread(block 6) failed [ 440.654174] loop3: detected capacity change from 0 to 14 06:12:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}}, 0x0) 06:12:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 4) 06:12:42 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:42 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}}, 0x0) 06:12:42 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 5) [ 440.824895] FAULT_INJECTION: forcing a failure. [ 440.824895] name failslab, interval 1, probability 0, space 0, times 0 [ 440.825781] CPU: 0 UID: 0 PID: 6406 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 440.825798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 440.825806] Call Trace: [ 440.825812] [ 440.825818] dump_stack_lvl+0xfa/0x120 [ 440.825845] should_fail_ex+0x4d7/0x5e0 [ 440.825867] should_failslab+0xc2/0x120 [ 440.825880] __kmalloc_cache_noprof+0x73/0x4a0 [ 440.825897] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 440.825910] ? register_lock_class+0x41/0x560 [ 440.825926] ? ipv6_flowlabel_opt+0x5c7/0x2e60 [ 440.825943] ? ipv6_flowlabel_opt+0x5c7/0x2e60 [ 440.825954] ipv6_flowlabel_opt+0x5c7/0x2e60 [ 440.825970] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 440.825983] ? do_raw_spin_lock+0x123/0x260 [ 440.825998] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 440.826015] ? mark_held_locks+0x49/0x80 [ 440.826030] do_ipv6_setsockopt+0x19ec/0x4800 [ 440.826052] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 440.826076] ? lock_acquire+0xdf/0x2e0 [ 440.826088] ? get_pid_task+0x29/0x250 [ 440.826106] ? find_held_lock+0x2b/0x80 [ 440.826122] ? get_pid_task+0xfd/0x250 [ 440.826139] ? lock_release+0xc8/0x290 [ 440.826153] ? get_pid_task+0x107/0x250 [ 440.826170] ? proc_fail_nth_write+0x98/0x250 [ 440.826193] ? sock_has_perm+0x21d/0x2b0 [ 440.826210] ? __pfx_sock_has_perm+0x10/0x10 [ 440.826228] ipv6_setsockopt+0xcb/0x170 [ 440.826255] rawv6_setsockopt+0xc7/0x4f0 [ 440.826271] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 440.826286] ? selinux_socket_setsockopt+0x6e/0x90 [ 440.826300] ? sock_common_setsockopt+0x2f/0x110 [ 440.826321] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 440.826339] do_sock_setsockopt+0xf7/0x1e0 [ 440.826361] __sys_setsockopt+0x11f/0x1a0 [ 440.826379] __x64_sys_setsockopt+0xbe/0x160 [ 440.826393] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 440.826413] do_syscall_64+0xbf/0x360 [ 440.826425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.826439] RIP: 0033:0x7fc5b550bb19 [ 440.826448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 440.826459] RSP: 002b:00007fc5b2a81188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 440.826471] RAX: ffffffffffffffda RBX: 00007fc5b561ef60 RCX: 00007fc5b550bb19 [ 440.826479] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 440.826486] RBP: 00007fc5b2a811d0 R08: 0000000000000020 R09: 0000000000000000 [ 440.826494] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 440.826501] R13: 00007fff5f45790f R14: 00007fc5b2a81300 R15: 0000000000022000 [ 440.826516] 06:12:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}}, 0x0) 06:12:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:12:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xf, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000000200)="070000000000000055dd45888f6106010040ee120004000000000007de4625d198feefcbf1e54d730c06ee059987003a000000", 0x33, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x2200}, {&(0x7f0000011a00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040", 0x3d, 0x2300}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}, {&(0x7f0000013300)="2719c0d901", 0x5, 0x20000}, {&(0x7f0000000140)="392b6f63db7d34c8ad7a2b31e7d259f667c0a01a499bea6c3b1d0747f3df6091cb917e04e826bc01752beeede5a2c7e7fb6f1fee32c024c75a9888e701fdf7e68165b69a264f32ded8dba1eced6e2f4bed52b7653ac06f57ce59acad291fa06d30c75da4e7254af454eb6989c7c508546dda8144480763edca85afa9d83879f4b14f2143739ab15106960ef30c61d1de127dc5dc14d7c5051e0c98f84d7da6ddc8874074d839b6287a3c5a5270de15961bf81b", 0xb3, 0x1cd}, {&(0x7f0000000300)="bb87764655e5b41ae7280987aafbe7dd80aa38e36a278d124da3d1000da199f516a95341163cd9413c3ff6df7d28285cbde0071c17879637ac5fb74aca879ca71204d7780c7678c28afc4667fa3d285e5024cfc35df8c7afd5dd55c4d0d4cb2c2b799c92e9804771408884e2c639b9308b63c73ce4bd19aef3c03be879af86a8fe17de40d4bea0a39f00a82c57ce7ccad9543b1442361eca91e6f4fb392ec7cb398f72d5576478023fd1ea47921c7efa1757eb79", 0xb4, 0x8}, {&(0x7f0000000080)="894282629bebf1fc47602160f9b4a2ef", 0x10, 0x63e}, {&(0x7f00000003c0)="7d03745abd6d03cd33037d36963a71dcce5ea069a950b77a43c2878520b2f5905c710d0ebe6fec8847d785c7c0ed362cc9784d3f2b11c6ddf65629ce599ff068787c54165b7650eb3ac3ffbaeb720614d175ae06e8e16ca13aff210211311de5c8cb71affde96d430d9434c41011afca04ca4dab6e605b30151ac4b6dbca8571e3f65cbabbf406dd2a87f559fae41500", 0x90, 0x20}, {&(0x7f00000000c0)="5fec59697238ec6e916be5a8a5cb1433", 0x10, 0xffff}, {&(0x7f0000000480)="7e096ccbb54d8f19b7f0b1881ee674c86d20f67c347fa9cd713f8d8e6784a5129bff5a936f266b169a252ff6337672ad14edac0d074eda0f5e5aa8237df71ae2720aef453b7730680462d3ec6b664e53201e7bfd87d337a3c5569e2a2b272ba453a6399649a5ba2172ac81848c2841081e10c078aa64276ce227f25079523444965803", 0x83, 0xffffffff}], 0x1, &(0x7f0000014100)) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0xee00) 06:12:51 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) 06:12:51 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) 06:12:51 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:51 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 6) 06:12:51 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) [ 449.625102] loop2: detected capacity change from 0 to 264192 [ 449.643018] EXT4-fs (loop2): unsupported descriptor size 53541 [ 449.670494] loop2: detected capacity change from 0 to 264192 [ 449.672702] loop4: detected capacity change from 0 to 2048 06:12:51 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 7) [ 449.693467] EXT4-fs (loop2): unsupported descriptor size 53541 06:12:51 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:12:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}}, 0x0) [ 449.748452] FAULT_INJECTION: forcing a failure. [ 449.748452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.749610] CPU: 0 UID: 0 PID: 6435 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 449.749626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 449.749634] Call Trace: [ 449.749638] [ 449.749642] dump_stack_lvl+0xfa/0x120 [ 449.749669] should_fail_ex+0x4d7/0x5e0 [ 449.749690] _copy_to_user+0x32/0xd0 [ 449.749706] simple_read_from_buffer+0xe0/0x180 [ 449.749728] proc_fail_nth_read+0x189/0x270 [ 449.749749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.749767] ? security_file_permission+0x22/0x90 [ 449.749781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.749798] vfs_read+0x1eb/0xbe0 [ 449.749818] ? __pfx_vfs_read+0x10/0x10 [ 449.749836] ? lock_release+0xc8/0x290 [ 449.749852] ? __fget_files+0x20d/0x3b0 [ 449.749874] ksys_read+0x121/0x240 [ 449.749890] ? __pfx_ksys_read+0x10/0x10 [ 449.749912] do_syscall_64+0xbf/0x360 [ 449.749925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.749938] RIP: 0033:0x7fc5b54be69c [ 449.749948] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 449.749959] RSP: 002b:00007fc5b2a81170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.749971] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc5b54be69c [ 449.749979] RDX: 000000000000000f RSI: 00007fc5b2a811e0 RDI: 0000000000000004 [ 449.749986] RBP: 00007fc5b2a811d0 R08: 0000000000000000 R09: 0000000000000000 [ 449.749994] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 449.750001] R13: 00007fff5f45790f R14: 00007fc5b2a81300 R15: 0000000000022000 [ 449.750017] 06:12:51 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000700)=[{&(0x7f0000000180)="ee86d2c50e712f0da7c75b36034984", 0xf}, {0x0, 0x0, 0x1000}, {&(0x7f00000004c0)}, {&(0x7f0000000640)}], 0x0, &(0x7f00000007c0)={[{}, {'['}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@measure}, {@subj_user={'subj_user', 0x3d, '^%^'}}]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) fsetxattr$security_evm(r1, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x2, "fa41b8dd"}, 0x5, 0x1) 06:12:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:12:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x40001, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x2d7a, 0x9, 0x7, 0x6, 0x2, "6a675e7771a7081e960f50ec5f4b55e778551f", 0x9, 0xffff}) 06:12:51 executing program 7: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @none}, &(0x7f00000004c0)=0xe, 0x800) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000500)=""/202, &(0x7f0000000600)=0xca) r1 = clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpgrp(r1) clone3(&(0x7f00000003c0)={0x810d8100, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x2c}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000240)=""/192, &(0x7f0000000380)=[r1, r1, r2], 0x3}, 0x58) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000640)={'erspan0\x00', {0x2, 0x0, @loopback}}) r3 = getpid() r4 = pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000480)) waitid$P_PIDFD(0x3, r4, &(0x7f0000000000), 0x1000000, 0x0) [ 449.850911] loop4: detected capacity change from 0 to 2048 06:12:52 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:12:52 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) [ 449.873939] loop3: detected capacity change from 0 to 16 [ 449.876482] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 449.892742] loop3: detected capacity change from 0 to 16 [ 449.893513] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 06:12:52 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xc0000) 06:12:52 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x3a, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}}, 0x0) 06:13:02 executing program 7: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES16, @ANYRES16, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES64, @ANYBLOB="9d4695c81dced71704d1a90bee1dbbdf83565d7ddfdf7c91e3bd85d2a648cbafa6d53d13f1bd49cab850f76ce720460c88b34f77b9c41079ad27f77edc4f30b13f8fca5b6e1e87e3af8edb80b0ecbc85f33504d0108e3f53608fa237a8f7"], 0xfffffd1f) r1 = dup(r0) lseek(r1, 0x0, 0x4) fchown(r1, 0x0, 0x0) 06:13:02 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:02 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) r0 = gettid() r1 = memfd_create(&(0x7f0000001280)='\x00', 0x0) ptrace$peek(0x2, r0, &(0x7f0000000040)) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0xfffffd1f) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r2, 0xfcb3b000) fchown(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x9, 0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x0) r5 = gettid() capset(&(0x7f0000000080)={0x20071026, r5}, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) ptrace$peek(0x2, r0, &(0x7f0000000000)) 06:13:02 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:02 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:02 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x2f00) [ 460.268323] loop4: detected capacity change from 0 to 2048 06:13:02 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:13:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}, {&(0x7f0000012d00)="111fc0d901", 0x5, 0x18000}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:02 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:02 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:02 executing program 7: syz_emit_ethernet(0x1d3, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x19d, 0x6, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0xd6, 0x1d, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x81, 0x1, [0x137, 0x9, 0x5]}}, @enc_lim={0x4, 0x1, 0x96}, @generic={0x4, 0xa6, "4f12612cb0742106e6ce363929a9efa3692d62e94271026ed57fc6d0ac44a81983d8853994e9951853db5edfdf6042dcd94740ec54cecef9f58ce8539d31228b786245ba8ca4b7e5308bfea7e8f3248936c7107e7566e0a4d1045ae28431fed0c18f5797bbcd155dfe4f66011b6cbbcc85980187da85d2c8ef0042ca65d527bd7a56b1594f95159105c1b4bd35d5f35725452bbd51c082c4efdac85a43e9a0c3fb0a843af5fd"}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x1, 0x14, "cc681e91f697ccd405766ddc1041e85fdc5205d6"}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x9, 0x8, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4}, {"0a2bf707eb2a8b058cfbcdeeed501bbe527e90bef512130d9d15f0cebd63fa841a173ffd409b30793d1e1a4e914fb23e14b418bcb7a9ae00da"}}}}}}}, 0x0) [ 460.400843] loop4: detected capacity change from 0 to 384 [ 460.413551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 460.414486] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (96 blocks) 06:13:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:11 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) r0 = gettid() r1 = memfd_create(&(0x7f0000001280)='\x00', 0x0) ptrace$peek(0x2, r0, &(0x7f0000000040)) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0xfffffd1f) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r2, 0xfcb3b000) fchown(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x9, 0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x0) r5 = gettid() capset(&(0x7f0000000080)={0x20071026, r5}, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) ptrace$peek(0x2, r0, &(0x7f0000000000)) 06:13:11 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 1) 06:13:11 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xffffffff000) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 06:13:11 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r2, &(0x7f0000000140)="c03c6a7f6a6389318fe69ca9d45c3b85b36ca48f8da8f0bc54ad9c6236280d", 0x1f, 0xc0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:11 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x1}, 0x8000) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x76) [ 469.327828] No source specified 06:13:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@data_journal}]}) [ 469.361771] FAULT_INJECTION: forcing a failure. [ 469.361771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.363658] CPU: 1 UID: 0 PID: 6523 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 469.363688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 469.363700] Call Trace: [ 469.363707] [ 469.363722] dump_stack_lvl+0xfa/0x120 [ 469.363762] should_fail_ex+0x4d7/0x5e0 [ 469.363797] _copy_from_user+0x30/0xd0 [ 469.363822] copy_msghdr_from_user+0x88/0x150 [ 469.363852] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 469.363889] ? lock_acquire+0xdf/0x2e0 [ 469.363917] ___sys_sendmsg+0xdc/0x1b0 [ 469.363945] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.363980] ? proc_fail_nth_write+0x98/0x250 [ 469.364017] ? lock_acquire+0xdf/0x2e0 [ 469.364038] ? __fget_files+0x34/0x3b0 [ 469.364068] ? find_held_lock+0x2b/0x80 [ 469.364097] ? __fget_files+0x203/0x3b0 [ 469.364127] ? lock_release+0xc8/0x290 [ 469.364152] ? __fget_files+0x20d/0x3b0 [ 469.364191] __sys_sendmsg+0x150/0x200 [ 469.364218] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.364249] ? fput+0x92/0xd0 [ 469.364271] ? ksys_write+0x1a3/0x240 [ 469.364302] ? __pfx_ksys_write+0x10/0x10 [ 469.364341] do_syscall_64+0xbf/0x360 [ 469.364364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.364386] RIP: 0033:0x7fb60c645b19 [ 469.364402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 469.364423] RSP: 002b:00007fb609bbb188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.364444] RAX: ffffffffffffffda RBX: 00007fb60c758f60 RCX: 00007fb60c645b19 [ 469.364458] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 469.364471] RBP: 00007fb609bbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 469.364484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.364497] R13: 00007ffd3bf04fff R14: 00007fb609bbb300 R15: 0000000000022000 [ 469.364525] 06:13:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:11 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x5480, &(0x7f0000000080)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x7, &(0x7f0000000040)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7f, 0x1, &(0x7f0000000000)=0x1) [ 469.423942] No source specified 06:13:11 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:11 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 2) [ 469.610674] FAULT_INJECTION: forcing a failure. [ 469.610674] name failslab, interval 1, probability 0, space 0, times 0 [ 469.612623] CPU: 1 UID: 0 PID: 6542 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 469.612652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 469.612665] Call Trace: [ 469.612673] [ 469.612681] dump_stack_lvl+0xfa/0x120 [ 469.612727] should_fail_ex+0x4d7/0x5e0 [ 469.612763] should_failslab+0xc2/0x120 [ 469.612784] kmem_cache_alloc_node_noprof+0x71/0x470 [ 469.612816] ? __alloc_skb+0x2ab/0x370 [ 469.612847] __alloc_skb+0x2ab/0x370 [ 469.612872] ? __pfx___alloc_skb+0x10/0x10 [ 469.612902] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 469.612936] netlink_alloc_large_skb+0x69/0x150 [ 469.612966] netlink_sendmsg+0x676/0xd80 [ 469.612998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.613037] ____sys_sendmsg+0xa67/0xc20 [ 469.613072] ? copy_msghdr_from_user+0xfb/0x150 [ 469.613100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.613142] ? lock_acquire+0xdf/0x2e0 [ 469.613169] ___sys_sendmsg+0x10f/0x1b0 [ 469.613197] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.613230] ? proc_fail_nth_write+0x98/0x250 [ 469.613265] ? lock_acquire+0xdf/0x2e0 [ 469.613286] ? __fget_files+0x34/0x3b0 [ 469.613316] ? find_held_lock+0x2b/0x80 [ 469.613345] ? __fget_files+0x203/0x3b0 [ 469.613375] ? lock_release+0xc8/0x290 [ 469.613400] ? __fget_files+0x20d/0x3b0 [ 469.613439] __sys_sendmsg+0x150/0x200 [ 469.613466] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.613502] ? __pfx_ksys_write+0x10/0x10 [ 469.613543] do_syscall_64+0xbf/0x360 [ 469.613565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.613588] RIP: 0033:0x7fb60c645b19 [ 469.613605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 469.613625] RSP: 002b:00007fb609bbb188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.613646] RAX: ffffffffffffffda RBX: 00007fb60c758f60 RCX: 00007fb60c645b19 [ 469.613661] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 469.613674] RBP: 00007fb609bbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 469.613687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.613699] R13: 00007ffd3bf04fff R14: 00007fb609bbb300 R15: 0000000000022000 [ 469.613727] [ 470.350762] Bluetooth: hci7: command 0x0406 tx timeout 06:13:20 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000580), 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r1 = getegid() semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)={{0x2, r0, 0x0, r0, r1, 0x12, 0x3dd7}, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x1}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x1a800, 0x1ff}, {0x7f, 0x5}], r0}, 0x18, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400", 0xa, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}, {0x0, 0x0, 0x50a21931}], 0x0, &(0x7f0000013800)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:13:20 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:20 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 3) 06:13:20 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) [ 478.427502] loop7: detected capacity change from 0 to 537 06:13:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x7, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) [ 478.484204] No source specified [ 478.496827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 06:13:20 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:20 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 4) 06:13:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030", 0x3d, 0x4}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:20 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x8, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) [ 478.653105] loop4: detected capacity change from 0 to 33 [ 478.676857] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 478.678260] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (8 blocks) [ 478.715459] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 06:13:29 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 5) 06:13:29 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), 0x0, 0x0, 0x1) bind$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e) write(r1, 0x0, 0xeffdffff) 06:13:29 executing program 7: r0 = eventfd(0xfffffff9) fcntl$setlease(r0, 0x400, 0x1) close(r0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'ip6erspan0\x00'}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) 06:13:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:29 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0xb, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:29 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:29 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 487.397080] loop4: detected capacity change from 0 to 33 [ 487.405952] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 487.406696] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (8 blocks) 06:13:29 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000003c0)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:29 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:29 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:29 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), 0x0, 0x0, 0x1) bind$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e) write(r1, 0x0, 0xeffdffff) 06:13:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 6) [ 487.556311] loop4: detected capacity change from 0 to 8 [ 487.569576] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 487.570322] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (2 blocks) 06:13:29 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:29 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:29 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 487.687328] FAULT_INJECTION: forcing a failure. [ 487.687328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.689092] CPU: 1 UID: 0 PID: 6628 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 487.689121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 487.689134] Call Trace: [ 487.689141] [ 487.689150] dump_stack_lvl+0xfa/0x120 [ 487.689191] should_fail_ex+0x4d7/0x5e0 [ 487.689227] _copy_from_iter+0x1dc/0x15b0 [ 487.689253] ? lock_acquire+0xdf/0x2e0 [ 487.689276] ? __virt_addr_valid+0x1c6/0x5d0 [ 487.689308] ? find_held_lock+0x2b/0x80 [ 487.689339] ? __pfx__copy_from_iter+0x10/0x10 [ 487.689361] ? lock_release+0xc8/0x290 [ 487.689386] ? __virt_addr_valid+0x100/0x5d0 [ 487.689418] ? __check_object_size+0x57b/0x880 [ 487.689452] netlink_sendmsg+0x809/0xd80 [ 487.689487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.689526] ____sys_sendmsg+0xa67/0xc20 [ 487.689562] ? copy_msghdr_from_user+0xfb/0x150 [ 487.689591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.689633] ? lock_acquire+0xdf/0x2e0 [ 487.689658] ___sys_sendmsg+0x10f/0x1b0 [ 487.689686] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.689726] ? proc_fail_nth_write+0x98/0x250 [ 487.689762] ? lock_acquire+0xdf/0x2e0 [ 487.689783] ? __fget_files+0x34/0x3b0 [ 487.689813] ? find_held_lock+0x2b/0x80 [ 487.689842] ? __fget_files+0x203/0x3b0 [ 487.689871] ? lock_release+0xc8/0x290 [ 487.689896] ? __fget_files+0x20d/0x3b0 [ 487.689935] __sys_sendmsg+0x150/0x200 [ 487.689963] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.689999] ? __pfx_ksys_write+0x10/0x10 [ 487.690039] do_syscall_64+0xbf/0x360 [ 487.690062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.690084] RIP: 0033:0x7fb60c645b19 [ 487.690101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.690122] RSP: 002b:00007fb609bbb188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.690143] RAX: ffffffffffffffda RBX: 00007fb60c758f60 RCX: 00007fb60c645b19 [ 487.690157] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 487.690170] RBP: 00007fb609bbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 487.690184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.690196] R13: 00007ffd3bf04fff R14: 00007fb609bbb300 R15: 0000000000022000 [ 487.690224] [ 487.695798] loop4: detected capacity change from 0 to 6 [ 487.734239] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 487.735021] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (1 blocks) [ 496.995576] kworker/u9:4 (324) used greatest stack depth: 24552 bytes left [ 496.999133] kworker/u9:3 (48) used greatest stack depth: 23776 bytes left 06:13:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 7) 06:13:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:39 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:39 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) 06:13:39 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:39 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:39 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 497.365029] loop4: detected capacity change from 0 to 4 [ 497.383556] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 497.384301] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (1 blocks) 06:13:39 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) [ 497.437490] FAULT_INJECTION: forcing a failure. [ 497.437490] name failslab, interval 1, probability 0, space 0, times 0 [ 497.438564] CPU: 0 UID: 0 PID: 6657 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 497.438598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 497.438615] Call Trace: [ 497.438625] [ 497.438636] dump_stack_lvl+0xfa/0x120 [ 497.438692] should_fail_ex+0x4d7/0x5e0 [ 497.438748] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 497.438778] should_failslab+0xc2/0x120 [ 497.438791] __kmalloc_noprof+0xb4/0x4c0 [ 497.438813] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 497.438865] genl_family_rcv_msg_doit+0xab/0x2f0 [ 497.438882] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 497.438902] ? cap_capable+0xdb/0x3b0 [ 497.438922] ? security_capable+0x2f/0x90 [ 497.438939] ? ns_capable+0xe2/0x120 [ 497.438957] genl_rcv_msg+0x532/0x7e0 [ 497.438976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.438993] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 497.439011] ? __pfx_nl80211_start_ap+0x10/0x10 [ 497.439028] ? __pfx_nl80211_post_doit+0x10/0x10 [ 497.439044] ? __lock_acquire+0x694/0x1b70 [ 497.439060] netlink_rcv_skb+0x147/0x430 [ 497.439075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.439093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.439115] ? netlink_deliver_tap+0x1ae/0xce0 [ 497.439129] ? is_vmalloc_addr+0x86/0xa0 [ 497.439148] genl_rcv+0x28/0x40 [ 497.439163] netlink_unicast+0x53d/0x7f0 [ 497.439180] ? __pfx_netlink_unicast+0x10/0x10 [ 497.439200] netlink_sendmsg+0x8ac/0xd80 [ 497.439218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.439239] ____sys_sendmsg+0xa67/0xc20 [ 497.439260] ? copy_msghdr_from_user+0xfb/0x150 [ 497.439275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.439298] ? lock_acquire+0xdf/0x2e0 [ 497.439312] ___sys_sendmsg+0x10f/0x1b0 [ 497.439327] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.439345] ? proc_fail_nth_write+0x98/0x250 [ 497.439365] ? lock_acquire+0xdf/0x2e0 [ 497.439377] ? __fget_files+0x34/0x3b0 [ 497.439394] ? find_held_lock+0x2b/0x80 [ 497.439411] ? __fget_files+0x203/0x3b0 [ 497.439427] ? lock_release+0xc8/0x290 [ 497.439441] ? __fget_files+0x20d/0x3b0 [ 497.439462] __sys_sendmsg+0x150/0x200 [ 497.439477] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.439497] ? __pfx_ksys_write+0x10/0x10 [ 497.439520] do_syscall_64+0xbf/0x360 [ 497.439533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.439546] RIP: 0033:0x7fb60c645b19 [ 497.439556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.439567] RSP: 002b:00007fb609bbb188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.439579] RAX: ffffffffffffffda RBX: 00007fb60c758f60 RCX: 00007fb60c645b19 [ 497.439587] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 497.439594] RBP: 00007fb609bbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.439602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.439608] R13: 00007ffd3bf04fff R14: 00007fb609bbb300 R15: 0000000000022000 [ 497.439624] 06:13:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:39 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x7) 06:13:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:39 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 497.548023] loop4: detected capacity change from 0 to 4 [ 497.558967] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 497.559697] EXT4-fs (loop4): unsupported descriptor size 0 06:13:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:13:39 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 8) 06:13:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:39 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) 06:13:39 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) [ 497.679474] syz-executor.4: attempt to access beyond end of device [ 497.679474] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 497.685912] EXT4-fs (loop4): unable to read superblock 06:13:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 9) 06:13:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x13, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) [ 497.783901] FAULT_INJECTION: forcing a failure. [ 497.783901] name failslab, interval 1, probability 0, space 0, times 0 [ 497.785854] CPU: 1 UID: 0 PID: 6686 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 497.785901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 497.785922] Call Trace: [ 497.785932] [ 497.785945] dump_stack_lvl+0xfa/0x120 [ 497.786009] should_fail_ex+0x4d7/0x5e0 [ 497.786070] should_failslab+0xc2/0x120 [ 497.786098] __kmalloc_cache_noprof+0x73/0x4a0 [ 497.786127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.786162] ? nl80211_start_ap+0x462/0x47b0 [ 497.786201] ? nl80211_start_ap+0x462/0x47b0 [ 497.786233] nl80211_start_ap+0x462/0x47b0 [ 497.786272] ? netdev_run_todo+0x702/0xf80 [ 497.786304] ? __pfx_nl80211_start_ap+0x10/0x10 [ 497.786337] ? __pfx_netdev_run_todo+0x10/0x10 [ 497.786372] ? __nla_parse+0x42/0x60 [ 497.786410] ? nl80211_pre_doit+0x111/0x980 [ 497.786445] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 497.786480] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 497.786524] ? security_capable+0x2f/0x90 [ 497.786557] ? ns_capable+0xe2/0x120 [ 497.786588] genl_rcv_msg+0x532/0x7e0 [ 497.786623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.786654] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 497.786683] ? __pfx_nl80211_start_ap+0x10/0x10 [ 497.786722] ? __pfx_nl80211_post_doit+0x10/0x10 [ 497.786751] ? __lock_acquire+0x694/0x1b70 [ 497.786779] netlink_rcv_skb+0x147/0x430 [ 497.786808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.786851] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.786892] ? netlink_deliver_tap+0x1ae/0xce0 [ 497.786918] ? is_vmalloc_addr+0x86/0xa0 [ 497.786952] genl_rcv+0x28/0x40 [ 497.786979] netlink_unicast+0x53d/0x7f0 [ 497.787011] ? __pfx_netlink_unicast+0x10/0x10 [ 497.787048] netlink_sendmsg+0x8ac/0xd80 [ 497.787081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.787121] ____sys_sendmsg+0xa67/0xc20 [ 497.787157] ? copy_msghdr_from_user+0xfb/0x150 [ 497.787185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.787229] ? lock_acquire+0xdf/0x2e0 [ 497.787254] ___sys_sendmsg+0x10f/0x1b0 [ 497.787282] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.787316] ? proc_fail_nth_write+0x98/0x250 [ 497.787358] ? lock_acquire+0xdf/0x2e0 [ 497.787379] ? __fget_files+0x34/0x3b0 [ 497.787410] ? find_held_lock+0x2b/0x80 [ 497.787439] ? __fget_files+0x203/0x3b0 [ 497.787469] ? lock_release+0xc8/0x290 [ 497.787495] ? __fget_files+0x20d/0x3b0 [ 497.787534] __sys_sendmsg+0x150/0x200 [ 497.787562] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.787599] ? __pfx_ksys_write+0x10/0x10 [ 497.787641] do_syscall_64+0xbf/0x360 [ 497.787664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.787686] RIP: 0033:0x7fb60c645b19 [ 497.787703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.787723] RSP: 002b:00007fb609bbb188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.787744] RAX: ffffffffffffffda RBX: 00007fb60c758f60 RCX: 00007fb60c645b19 [ 497.787759] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 497.787772] RBP: 00007fb609bbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.787785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.787798] R13: 00007ffd3bf04fff R14: 00007fb609bbb300 R15: 0000000000022000 [ 497.787827] 06:13:47 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:47 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) 06:13:47 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:47 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:47 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) 06:13:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 10) 06:13:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x15, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) [ 505.620426] syz-executor.4: attempt to access beyond end of device [ 505.620426] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 505.622865] EXT4-fs (loop4): unable to read superblock 06:13:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 11) 06:13:47 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 505.701184] FAULT_INJECTION: forcing a failure. [ 505.701184] name failslab, interval 1, probability 0, space 0, times 0 [ 505.702139] CPU: 0 UID: 0 PID: 6717 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 505.702155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 505.702162] Call Trace: [ 505.702167] [ 505.702172] dump_stack_lvl+0xfa/0x120 [ 505.702198] should_fail_ex+0x4d7/0x5e0 [ 505.702219] should_failslab+0xc2/0x120 [ 505.702233] kmem_cache_alloc_node_noprof+0x71/0x470 [ 505.702250] ? __alloc_skb+0x2ab/0x370 [ 505.702268] __alloc_skb+0x2ab/0x370 [ 505.702282] ? __pfx___alloc_skb+0x10/0x10 [ 505.702297] ? genl_rcv_msg+0x532/0x7e0 [ 505.702319] netlink_ack+0x167/0xbf0 [ 505.702339] netlink_rcv_skb+0x344/0x430 [ 505.702354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.702372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.702394] ? netlink_deliver_tap+0x1ae/0xce0 [ 505.702408] ? is_vmalloc_addr+0x86/0xa0 [ 505.702426] genl_rcv+0x28/0x40 [ 505.702441] netlink_unicast+0x53d/0x7f0 [ 505.702458] ? __pfx_netlink_unicast+0x10/0x10 [ 505.702478] netlink_sendmsg+0x8ac/0xd80 [ 505.702496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.702517] ____sys_sendmsg+0xa67/0xc20 [ 505.702537] ? copy_msghdr_from_user+0xfb/0x150 [ 505.702552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.702575] ? lock_acquire+0xdf/0x2e0 [ 505.702590] ___sys_sendmsg+0x10f/0x1b0 [ 505.702606] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.702624] ? proc_fail_nth_write+0x98/0x250 [ 505.702643] ? lock_acquire+0xdf/0x2e0 [ 505.702654] ? __fget_files+0x34/0x3b0 [ 505.702672] ? find_held_lock+0x2b/0x80 [ 505.702688] ? __fget_files+0x203/0x3b0 [ 505.702704] ? lock_release+0xc8/0x290 [ 505.702722] ? __fget_files+0x20d/0x3b0 [ 505.702744] __sys_sendmsg+0x150/0x200 [ 505.702758] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.702778] ? __pfx_ksys_write+0x10/0x10 [ 505.702800] do_syscall_64+0xbf/0x360 [ 505.702813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.702826] RIP: 0033:0x7fb60c645b19 [ 505.702835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.702846] RSP: 002b:00007fb609bbb188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.702858] RAX: ffffffffffffffda RBX: 00007fb60c758f60 RCX: 00007fb60c645b19 [ 505.702866] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 505.702873] RBP: 00007fb609bbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.702880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.702887] R13: 00007ffd3bf04fff R14: 00007fb609bbb300 R15: 0000000000022000 [ 505.702902] 06:13:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:47 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 12) 06:13:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x16, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 505.874499] syz-executor.4: attempt to access beyond end of device [ 505.874499] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 505.884349] EXT4-fs (loop4): unable to read superblock 06:13:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:13:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:56 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nfsfs\x00') pread64(r0, &(0x7f0000000140)=""/183, 0xb7, 0xa3) dup2(r0, r0) 06:13:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 13) 06:13:56 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) 06:13:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:13:56 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 514.167262] loop4: detected capacity change from 0 to 4 [ 514.179629] FAULT_INJECTION: forcing a failure. [ 514.179629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.181988] CPU: 1 UID: 0 PID: 6750 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 514.182023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 514.182039] Call Trace: [ 514.182047] [ 514.182057] dump_stack_lvl+0xfa/0x120 [ 514.182106] should_fail_ex+0x4d7/0x5e0 [ 514.182150] _copy_from_user+0x30/0xd0 [ 514.182182] copy_from_sockptr_offset.constprop.0+0x167/0x1a0 [ 514.182224] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 514.182277] do_ipv6_setsockopt+0xbd2/0x4800 [ 514.182325] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 514.182375] ? __pfx_perf_trace_lock+0x10/0x10 [ 514.182412] ? lock_acquire+0xdf/0x2e0 [ 514.182440] ? perf_trace_lock+0xb5/0x5d0 [ 514.182466] ? find_held_lock+0x2b/0x80 [ 514.182501] ? get_pid_task+0xfd/0x250 [ 514.182543] ? perf_trace_lock+0xb5/0x5d0 [ 514.182577] ? __pfx_perf_trace_lock+0x10/0x10 [ 514.182604] ? proc_fail_nth_write+0x98/0x250 [ 514.182648] ? sock_has_perm+0x21d/0x2b0 [ 514.182679] ? __pfx_sock_has_perm+0x10/0x10 [ 514.182728] ipv6_setsockopt+0xcb/0x170 [ 514.182769] rawv6_setsockopt+0xc7/0x4f0 [ 514.182803] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 514.182839] ? selinux_socket_setsockopt+0x6e/0x90 [ 514.182870] ? sock_common_setsockopt+0x2f/0x110 [ 514.182916] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 514.182955] do_sock_setsockopt+0xf7/0x1e0 [ 514.183023] __sys_setsockopt+0x11f/0x1a0 [ 514.183064] __x64_sys_setsockopt+0xbe/0x160 [ 514.183096] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 514.183138] do_syscall_64+0xbf/0x360 [ 514.183166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.183192] RIP: 0033:0x7f4de8afcb19 [ 514.183213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 514.183237] RSP: 002b:00007f4de6072188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 514.183263] RAX: ffffffffffffffda RBX: 00007f4de8c0ff60 RCX: 00007f4de8afcb19 [ 514.183280] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 514.183296] RBP: 00007f4de60721d0 R08: 0000000000000020 R09: 0000000000000000 [ 514.183312] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 514.183327] R13: 00007ffc2df46c9f R14: 00007f4de6072300 R15: 0000000000022000 [ 514.183365] [ 514.185652] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 06:13:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 14) 06:13:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:13:56 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:13:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:13:56 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) [ 514.353130] FAULT_INJECTION: forcing a failure. [ 514.353130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.354250] CPU: 0 UID: 0 PID: 6764 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 514.354267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 514.354275] Call Trace: [ 514.354281] [ 514.354286] dump_stack_lvl+0xfa/0x120 [ 514.354317] should_fail_ex+0x4d7/0x5e0 [ 514.354347] _copy_from_user+0x30/0xd0 [ 514.354369] copy_from_sockptr_offset+0x14e/0x180 [ 514.354386] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 514.354403] ? perf_trace_run_bpf_submit+0xef/0x180 [ 514.354435] ipv6_flowlabel_opt+0xd6/0x2e60 [ 514.354464] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 514.354476] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 514.354503] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.354531] ? mark_held_locks+0x49/0x80 [ 514.354556] do_ipv6_setsockopt+0x19ec/0x4800 [ 514.354589] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 514.354628] ? perf_trace_run_bpf_submit+0xef/0x180 [ 514.354650] ? perf_trace_run_bpf_submit+0xef/0x180 [ 514.354685] ? perf_trace_run_bpf_submit+0xef/0x180 [ 514.354701] ? perf_trace_run_bpf_submit+0xef/0x180 [ 514.354732] ? perf_trace_lock+0x337/0x5d0 [ 514.354745] ? sock_has_perm+0x21d/0x2b0 [ 514.354763] ? __pfx_sock_has_perm+0x10/0x10 [ 514.354791] ipv6_setsockopt+0xcb/0x170 [ 514.354816] rawv6_setsockopt+0xc7/0x4f0 [ 514.354835] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 514.354855] ? selinux_socket_setsockopt+0x6e/0x90 [ 514.354869] ? sock_common_setsockopt+0x2f/0x110 [ 514.354897] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 514.354915] do_sock_setsockopt+0xf7/0x1e0 [ 514.354946] __sys_setsockopt+0x11f/0x1a0 [ 514.354973] __x64_sys_setsockopt+0xbe/0x160 [ 514.354989] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 514.355021] do_syscall_64+0xbf/0x360 [ 514.355038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.355052] RIP: 0033:0x7f4de8afcb19 [ 514.355063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 514.355075] RSP: 002b:00007f4de6072188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 514.355087] RAX: ffffffffffffffda RBX: 00007f4de8c0ff60 RCX: 00007f4de8afcb19 [ 514.355096] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 514.355103] RBP: 00007f4de60721d0 R08: 0000000000000020 R09: 0000000000000000 [ 514.355111] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 514.355118] R13: 00007ffc2df46c9f R14: 00007f4de6072300 R15: 0000000000022000 [ 514.355153] 06:14:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x19, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:05 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) 06:14:05 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:05 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) socket$unix(0x1, 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) (fail_nth: 15) 06:14:05 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 523.632268] FAULT_INJECTION: forcing a failure. [ 523.632268] name failslab, interval 1, probability 0, space 0, times 0 [ 523.633828] CPU: 0 UID: 0 PID: 6780 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 523.633848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.633857] Call Trace: [ 523.633862] [ 523.633869] dump_stack_lvl+0xfa/0x120 [ 523.633902] should_fail_ex+0x4d7/0x5e0 [ 523.633935] should_failslab+0xc2/0x120 [ 523.633953] __kmalloc_cache_noprof+0x73/0x4a0 [ 523.633976] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.633997] ? fl_create+0x105/0xc30 [ 523.634024] ? fl_create+0x105/0xc30 [ 523.634039] fl_create+0x105/0xc30 [ 523.634060] ? __pfx_perf_trace_lock+0x10/0x10 [ 523.634080] ? __pfx_fl_create+0x10/0x10 [ 523.634100] ? lock_acquire+0xdf/0x2e0 [ 523.634116] ? __might_fault+0xe0/0x190 [ 523.634134] ? find_held_lock+0x2b/0x80 [ 523.634155] ? __might_fault+0x138/0x190 [ 523.634171] ? lock_release+0xc8/0x290 [ 523.634189] ? __might_fault+0xe0/0x190 [ 523.634216] ? _copy_from_user+0x5b/0xd0 [ 523.634239] ? copy_from_sockptr_offset+0xea/0x180 [ 523.634257] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 523.634276] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.634307] ipv6_flowlabel_opt+0x57c/0x2e60 [ 523.634343] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 523.634368] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 523.634398] ? mark_held_locks+0x49/0x80 [ 523.634426] do_ipv6_setsockopt+0x19ec/0x4800 [ 523.634463] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 523.634509] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.634535] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.634576] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.634595] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.634627] ? perf_trace_lock+0x337/0x5d0 [ 523.634641] ? sock_has_perm+0x21d/0x2b0 [ 523.634660] ? __pfx_sock_has_perm+0x10/0x10 [ 523.634693] ipv6_setsockopt+0xcb/0x170 [ 523.634728] rawv6_setsockopt+0xc7/0x4f0 [ 523.634751] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 523.634775] ? selinux_socket_setsockopt+0x6e/0x90 [ 523.634791] ? sock_common_setsockopt+0x2f/0x110 [ 523.634822] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 523.634845] do_sock_setsockopt+0xf7/0x1e0 [ 523.634879] __sys_setsockopt+0x11f/0x1a0 [ 523.634911] __x64_sys_setsockopt+0xbe/0x160 [ 523.634929] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 523.634956] do_syscall_64+0xbf/0x360 [ 523.634975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.634991] RIP: 0033:0x7f4de8afcb19 [ 523.635003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.635017] RSP: 002b:00007f4de6072188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 523.635031] RAX: ffffffffffffffda RBX: 00007f4de8c0ff60 RCX: 00007f4de8afcb19 [ 523.635040] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 523.635048] RBP: 00007f4de60721d0 R08: 0000000000000020 R09: 0000000000000000 [ 523.635057] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 523.635065] R13: 00007ffc2df46c9f R14: 00007f4de6072300 R15: 0000000000022000 [ 523.635117] [ 523.686916] loop4: detected capacity change from 0 to 4 06:14:05 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 523.698693] FAULT_INJECTION: forcing a failure. [ 523.698693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.700261] CPU: 1 UID: 0 PID: 6791 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 523.700283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.700293] Call Trace: [ 523.700299] [ 523.700305] dump_stack_lvl+0xfa/0x120 [ 523.700339] should_fail_ex+0x4d7/0x5e0 [ 523.700369] _copy_to_user+0x32/0xd0 [ 523.700389] simple_read_from_buffer+0xe0/0x180 [ 523.700413] proc_fail_nth_read+0x189/0x270 [ 523.700438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.700461] ? security_file_permission+0x22/0x90 [ 523.700480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.700502] vfs_read+0x1eb/0xbe0 [ 523.700529] ? __pfx_vfs_read+0x10/0x10 [ 523.700552] ? lock_release+0xc8/0x290 [ 523.700573] ? __fget_files+0x20d/0x3b0 [ 523.700602] ksys_read+0x121/0x240 [ 523.700624] ? __pfx_ksys_read+0x10/0x10 [ 523.700653] do_syscall_64+0xbf/0x360 06:14:05 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 523.700670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.700687] RIP: 0033:0x7fb60c5f869c [ 523.700699] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 523.700719] RSP: 002b:00007fb609bbb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 523.700734] RAX: ffffffffffffffda RBX: 0000000000000054 RCX: 00007fb60c5f869c [ 523.700745] RDX: 000000000000000f RSI: 00007fb609bbb1e0 RDI: 0000000000000004 [ 523.700755] RBP: 00007fb609bbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 523.700765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.700774] R13: 00007ffd3bf04fff R14: 00007fb609bbb300 R15: 0000000000022000 [ 523.700795] [ 523.741923] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 06:14:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1a, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) [ 523.833412] loop4: detected capacity change from 0 to 4 [ 523.841974] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 06:14:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:06 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:06 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:14:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) [ 523.922282] FAULT_INJECTION: forcing a failure. [ 523.922282] name failslab, interval 1, probability 0, space 0, times 0 [ 523.923273] CPU: 0 UID: 0 PID: 6808 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 523.923290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.923297] Call Trace: [ 523.923302] [ 523.923308] dump_stack_lvl+0xfa/0x120 [ 523.923337] should_fail_ex+0x4d7/0x5e0 [ 523.923365] should_failslab+0xc2/0x120 [ 523.923380] __kmalloc_cache_noprof+0x73/0x4a0 [ 523.923398] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 523.923414] ? ipv6_flowlabel_opt+0x5c7/0x2e60 [ 523.923426] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.923451] ? ipv6_flowlabel_opt+0x5c7/0x2e60 [ 523.923464] ipv6_flowlabel_opt+0x5c7/0x2e60 [ 523.923491] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 523.923511] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 523.923538] ? mark_held_locks+0x49/0x80 [ 523.923562] do_ipv6_setsockopt+0x19ec/0x4800 [ 523.923594] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 523.923633] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.923654] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.923689] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.923704] ? perf_trace_run_bpf_submit+0xef/0x180 [ 523.923736] ? perf_trace_lock+0x337/0x5d0 [ 523.923748] ? sock_has_perm+0x21d/0x2b0 [ 523.923765] ? __pfx_sock_has_perm+0x10/0x10 [ 523.923792] ipv6_setsockopt+0xcb/0x170 [ 523.923817] rawv6_setsockopt+0xc7/0x4f0 [ 523.923836] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 523.923856] ? selinux_socket_setsockopt+0x6e/0x90 [ 523.923870] ? sock_common_setsockopt+0x2f/0x110 [ 523.923896] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 523.923915] do_sock_setsockopt+0xf7/0x1e0 [ 523.923944] __sys_setsockopt+0x11f/0x1a0 [ 523.923971] __x64_sys_setsockopt+0xbe/0x160 [ 523.923986] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 523.924008] do_syscall_64+0xbf/0x360 [ 523.924025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.924039] RIP: 0033:0x7f4de8afcb19 [ 523.924049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.924060] RSP: 002b:00007f4de6072188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 523.924072] RAX: ffffffffffffffda RBX: 00007f4de8c0ff60 RCX: 00007f4de8afcb19 [ 523.924080] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 523.924087] RBP: 00007f4de60721d0 R08: 0000000000000020 R09: 0000000000000000 [ 523.924095] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 523.924102] R13: 00007ffc2df46c9f R14: 00007f4de6072300 R15: 0000000000022000 [ 523.924137] 06:14:14 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) 06:14:14 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:14 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:14 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:14:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:14 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:14 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) (fail_nth: 7) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:14:14 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 532.643501] loop4: detected capacity change from 0 to 4 [ 532.654813] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 06:14:14 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:14 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 532.721305] FAULT_INJECTION: forcing a failure. [ 532.721305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.723171] CPU: 1 UID: 0 PID: 6838 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 532.723222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 532.723239] Call Trace: [ 532.723250] [ 532.723263] dump_stack_lvl+0xfa/0x120 [ 532.723310] should_fail_ex+0x4d7/0x5e0 [ 532.723350] _copy_to_user+0x32/0xd0 [ 532.723380] simple_read_from_buffer+0xe0/0x180 [ 532.723416] proc_fail_nth_read+0x189/0x270 [ 532.723452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 532.723488] ? security_file_permission+0x22/0x90 [ 532.723515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 532.723549] vfs_read+0x1eb/0xbe0 [ 532.723590] ? __pfx_vfs_read+0x10/0x10 [ 532.723626] ? lock_release+0xc8/0x290 [ 532.723658] ? __fget_files+0x20d/0x3b0 [ 532.723705] ksys_read+0x121/0x240 [ 532.723745] ? __pfx_ksys_read+0x10/0x10 [ 532.723791] do_syscall_64+0xbf/0x360 [ 532.723816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.723840] RIP: 0033:0x7f4de8aaf69c [ 532.723859] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 532.723881] RSP: 002b:00007f4de6072170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 532.723904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4de8aaf69c [ 532.723919] RDX: 000000000000000f RSI: 00007f4de60721e0 RDI: 0000000000000005 [ 532.723933] RBP: 00007f4de60721d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.723947] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 532.723961] R13: 00007ffc2df46c9f R14: 00007f4de6072300 R15: 0000000000022000 [ 532.723996] 06:14:14 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) [ 532.972379] loop4: detected capacity change from 0 to 4 [ 533.000320] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 06:14:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:14:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f465", 0x33, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:24 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:24 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:24 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:24 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:24 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 542.390857] loop4: detected capacity change from 0 to 4 [ 542.402583] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 06:14:24 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f465", 0x33, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:24 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:24 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x3a, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 542.533535] loop4: detected capacity change from 0 to 4 [ 542.542026] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 06:14:34 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:14:34 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f465", 0x33, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:34 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:34 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) 06:14:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x21, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:34 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 552.449979] loop4: detected capacity change from 0 to 4 [ 552.463111] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 06:14:34 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:34 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:34 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:14:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:34 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:34 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) [ 552.705239] loop4: detected capacity change from 0 to 4 [ 552.724922] EXT4-fs (loop4): invalid first ino: 0 06:14:34 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) 06:14:44 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:44 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x24, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:14:44 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 562.526300] loop4: detected capacity change from 0 to 4 [ 562.536383] EXT4-fs (loop4): invalid first ino: 0 06:14:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2a, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:44 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 562.640069] loop4: detected capacity change from 0 to 4 [ 562.647161] EXT4-fs (loop4): invalid first ino: 0 06:14:44 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 562.744733] loop4: detected capacity change from 0 to 4 [ 562.756538] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) 06:14:44 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:14:53 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2b, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:14:53 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:53 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2c, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) [ 571.309633] loop4: detected capacity change from 0 to 4 [ 571.330381] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) 06:14:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:53 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x7, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:14:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2d, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:53 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:14:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:14:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:14:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) [ 571.554416] loop4: detected capacity change from 0 to 4 [ 571.567488] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) 06:15:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:04 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x8, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:04 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xbd, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:04 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2f, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 581.946336] loop4: detected capacity change from 0 to 4 [ 581.968646] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) 06:15:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x30, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:04 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0xb, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x31, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) [ 582.305023] loop4: detected capacity change from 0 to 4 [ 582.312458] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) 06:15:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:13 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:13 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:13 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:13 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 590.939201] loop4: detected capacity change from 0 to 4 [ 590.958261] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) 06:15:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x33, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:13 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 591.076741] loop4: detected capacity change from 0 to 4 [ 591.084309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 591.085135] EXT4-fs (loop4): unsupported descriptor size 0 06:15:23 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x35, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:23 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:23 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:23 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 601.479551] loop4: detected capacity change from 0 to 4 [ 601.498038] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) 06:15:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:23 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:23 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 601.752233] loop4: detected capacity change from 0 to 4 06:15:23 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 601.775350] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) 06:15:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:23 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) [ 601.982697] loop4: detected capacity change from 0 to 4 [ 601.991130] EXT4-fs (loop4): fragment/cluster size (32768) != block size (2048) 06:15:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x38, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:33 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xc00, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d242", 0x62, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:33 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x13, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:33 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 611.862176] loop4: detected capacity change from 0 to 4 [ 611.878653] EXT4-fs (loop4): unsupported descriptor size 0 06:15:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d242", 0x62, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:34 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:34 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:34 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:34 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xbd00, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 612.003394] loop4: detected capacity change from 0 to 4 [ 612.018363] EXT4-fs (loop4): unsupported descriptor size 0 06:15:43 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x15, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:43 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:43 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:43 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:43 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3a, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d242", 0x62, 0x400}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) [ 621.784704] loop4: detected capacity change from 0 to 4 [ 621.808989] EXT4-fs (loop4): unsupported descriptor size 0 06:15:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3b, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:44 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:44 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:44 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x16, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:44 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3c, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 622.088459] syz-executor.4: attempt to access beyond end of device [ 622.088459] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 622.095811] EXT4-fs (loop4): unable to read superblock 06:15:54 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:54 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:54 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3e, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) 06:15:54 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 632.291161] syz-executor.4: attempt to access beyond end of device [ 632.291161] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 632.298185] EXT4-fs (loop4): unable to read superblock 06:15:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x400300, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:15:54 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:54 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x42, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:15:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:15:54 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:15:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63}], 0x0, &(0x7f00000001c0)={[{@data_journal}]}) [ 632.516489] syz-executor.4: attempt to access beyond end of device [ 632.516489] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 632.523991] EXT4-fs (loop4): unable to read superblock 06:16:04 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:04 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}], 0x0, 0x0) 06:16:04 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x19, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:04 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x43, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 642.169140] loop4: detected capacity change from 0 to 4 06:16:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x46, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}], 0x0, 0x0) 06:16:04 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1a, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:04 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:04 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:04 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}], 0x0, 0x0) [ 642.622277] loop4: detected capacity change from 0 to 4 06:16:13 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}], 0x0, &(0x7f00000001c0)) 06:16:13 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x49, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:13 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 651.766941] loop4: detected capacity change from 0 to 4 [ 651.798312] EXT4-fs (loop4): unsupported descriptor size 0 06:16:13 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:22 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:22 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}], 0x0, &(0x7f00000001c0)) 06:16:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:22 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 660.711405] loop4: detected capacity change from 0 to 4 06:16:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 660.741314] EXT4-fs (loop4): unsupported descriptor size 0 06:16:22 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4c, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}], 0x0, &(0x7f00000001c0)) 06:16:23 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 661.001322] loop4: detected capacity change from 0 to 4 [ 661.007019] EXT4-fs (loop4): unsupported descriptor size 0 06:16:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:31 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x21, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:31 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:31 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4d, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xc000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:31 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4e, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:31 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:31 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:40 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:40 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:40 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1={0xfc, 0x2}, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xbd000000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:49 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x24, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:49 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:49 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:49 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:49 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:49 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:49 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:49 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1={0xfc, 0x1, '\x00', 0x2}, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:49 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2a, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:49 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:49 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:58 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2b, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1={0xfc, 0x1, '\x00', 0x5}, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:58 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:58 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:16:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:16:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10002, 0x0, 0xff, 0x1}, 0x20) 06:16:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2c, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:16:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:16:59 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xf, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2d, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10005, 0x0, 0xff, 0x1}, 0x20) 06:17:08 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x180, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10008, 0x0, 0xff, 0x1}, 0x20) 06:17:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:18 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2f, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x33fe0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10500, 0x0, 0xff, 0x1}, 0x20) 06:17:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:17:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x30, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:18 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:19 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x2, 0xff, 0x1}, 0x20) 06:17:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:17:19 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x5, 0xff, 0x1}, 0x20) 06:17:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) 06:17:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x31, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:17:28 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x2}, 0x20) 06:17:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0xf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:17:36 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:36 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x2}, 0x20) 06:17:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:37 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:37 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x5}, 0x20) 06:17:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x33, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:37 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:17:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x8}, 0x20) 06:17:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:17:47 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x500}, 0x20) 06:17:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x74, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:47 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x35, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:47 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) 06:17:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:17:57 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, 0x0, 0x0) 06:17:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:57 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x5}, 0x20) 06:17:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x38, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x8}, 0x20) 06:17:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, 0x0, 0x0) 06:17:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x500}, 0x20) 06:17:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x6, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:17:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:17:57 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:17:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, 0x0, 0x0) 06:18:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x7, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:09 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:09 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:18:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:09 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3a, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x8, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:19 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3b, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:18:19 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2}, 0x20) 06:18:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x9, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:19 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:27 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x5}, 0x20) 06:18:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:18:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3c, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x8}, 0x20) 06:18:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xf, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:18:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xbd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:27 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x500}, 0x20) 06:18:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3e, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:18:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:18:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:18:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:18:38 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x80000}, 0x20) 06:18:38 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:18:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:38 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x42, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x500, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:18:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x1000000}, 0x20) 06:18:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:18:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:18:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x600, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:38 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:38 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x43, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:47 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:47 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x700, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:18:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:18:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2000000}, 0x20) 06:18:47 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x46, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:18:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x900, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:47 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:18:47 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x5000000}, 0x20) 06:18:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:18:47 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x48, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:18:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xc00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:18:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x49, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:18:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0xa4ffffff}, 0x20) 06:18:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:56 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:18:56 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xbd00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:18:56 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:18:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:18:56 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:18:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0xffffffa4}, 0x20) 06:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:07 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:07 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2) 06:19:07 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:19:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:07 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:19:07 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x3) 06:19:07 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:07 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:07 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x34000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:07 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:07 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x4) 06:19:07 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4c, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4d, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:17 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:19:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:17 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:17 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x5) 06:19:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:19:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:17 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x6) 06:19:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x400300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4e, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:29 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:29 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1={0xfc, 0x2}, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:29 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:29 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x7) 06:19:29 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:29 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:29 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x8) 06:19:29 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:29 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:29 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:29 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:29 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0xb) 06:19:39 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:39 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:39 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:19:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1={0xfc, 0x1, '\x00', 0x2}, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:39 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:39 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1={0xfc, 0x1, '\x00', 0x5}, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x10) 06:19:39 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) 06:19:48 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:19:48 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10002, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x11) 06:19:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:19:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x12) 06:19:48 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) 06:19:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:48 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10005, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, 0x0, 0x0) 06:19:48 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:48 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(0x0, 0x7f) 06:19:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x13) 06:19:48 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, 0x0, 0x0) 06:19:48 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10500, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x14) 06:19:48 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:48 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:19:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, 0x0, 0x0) 06:19:58 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:19:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x0, 0x0, 0xff, 0x1}, 0x20) 06:19:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:58 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:19:58 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:19:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:58 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) 06:19:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x15) 06:19:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x16) 06:19:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:19:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x2, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1, 0x0, 0x0, 0x0, 0x1}, 0x20) 06:19:58 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x17) 06:19:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x5, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:19:58 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) 06:19:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1}, 0x20) 06:20:08 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x18) 06:20:08 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x7, 0x90, 0xc3, 0x0, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x2, 0x100000000}, 0x4006, 0x4, 0x40000000, 0x0, 0x6, 0x7, 0x76b, 0x0, 0x96f, 0x0, 0x9}, 0x0, 0x5, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xc000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:08 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:20:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:20:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:09 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x19) 06:20:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:09 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:20:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1a) 06:20:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 1) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:18 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 1) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:18 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xbd000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x2}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:20:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1}, 0x20) (fail_nth: 1) [ 896.035470] FAULT_INJECTION: forcing a failure. [ 896.035470] name failslab, interval 1, probability 0, space 0, times 0 [ 896.037251] CPU: 1 UID: 0 PID: 8530 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 896.037280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.037293] Call Trace: [ 896.037300] [ 896.037308] dump_stack_lvl+0xfa/0x120 [ 896.037348] should_fail_ex+0x4d7/0x5e0 [ 896.037384] should_failslab+0xc2/0x120 [ 896.037406] __kmalloc_cache_noprof+0x73/0x4a0 [ 896.037435] ? __might_fault+0xe0/0x190 [ 896.037457] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 896.037491] ? alloc_pipe_info+0x10d/0x5a0 [ 896.037510] ? perf_swevent_event+0x63/0x3f0 [ 896.037541] ? alloc_pipe_info+0x10d/0x5a0 [ 896.037561] alloc_pipe_info+0x10d/0x5a0 [ 896.037583] splice_direct_to_actor+0x78c/0x9d0 [ 896.037612] ? __lock_acquire+0x694/0x1b70 [ 896.037635] ? __pfx_direct_splice_actor+0x10/0x10 [ 896.037662] ? lock_acquire+0xc2/0x2e0 [ 896.037687] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 896.037724] ? lock_acquire+0xdf/0x2e0 [ 896.037749] do_splice_direct+0x179/0x250 [ 896.037775] ? __pfx_do_splice_direct+0x10/0x10 [ 896.037803] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 896.037832] ? security_file_permission+0x22/0x90 [ 896.037860] do_sendfile+0xa8e/0xdc0 [ 896.037896] ? __pfx_do_sendfile+0x10/0x10 [ 896.037929] ? perf_trace_preemptirq_template+0x259/0x430 [ 896.037968] __x64_sys_sendfile64+0x1d3/0x210 [ 896.037991] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 896.038022] do_syscall_64+0xbf/0x360 [ 896.038044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.038067] RIP: 0033:0x7f4188335b19 [ 896.038083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.038104] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 896.038125] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 896.038139] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 896.038152] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 896.038165] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 896.038178] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 896.038206] [ 896.074334] FAULT_INJECTION: forcing a failure. [ 896.074334] name failslab, interval 1, probability 0, space 0, times 0 [ 896.076033] CPU: 1 UID: 0 PID: 8536 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 896.076062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.076075] Call Trace: [ 896.076083] [ 896.076091] dump_stack_lvl+0xfa/0x120 [ 896.076131] should_fail_ex+0x4d7/0x5e0 [ 896.076167] should_failslab+0xc2/0x120 [ 896.076189] __kmalloc_cache_noprof+0x73/0x4a0 [ 896.076219] ? __might_fault+0xe0/0x190 [ 896.076241] ? alloc_pipe_info+0x10d/0x5a0 [ 896.076261] ? find_held_lock+0x2b/0x80 [ 896.076295] ? alloc_pipe_info+0x10d/0x5a0 [ 896.076315] alloc_pipe_info+0x10d/0x5a0 [ 896.076340] splice_direct_to_actor+0x78c/0x9d0 [ 896.076371] ? __lock_acquire+0x694/0x1b70 [ 896.076392] ? __pfx_direct_splice_actor+0x10/0x10 [ 896.076419] ? lock_acquire+0xc2/0x2e0 [ 896.076442] ? find_held_lock+0x2b/0x80 [ 896.076471] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 896.076500] ? lock_acquire+0xdf/0x2e0 [ 896.076526] do_splice_direct+0x179/0x250 [ 896.076553] ? __pfx_do_splice_direct+0x10/0x10 [ 896.076581] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 896.076610] ? security_file_permission+0x22/0x90 [ 896.076638] do_sendfile+0xa8e/0xdc0 [ 896.076673] ? __pfx_do_sendfile+0x10/0x10 [ 896.076711] ? __fget_files+0x20d/0x3b0 [ 896.076751] __x64_sys_sendfile64+0x1d3/0x210 [ 896.076774] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 896.076805] do_syscall_64+0xbf/0x360 [ 896.076828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.076850] RIP: 0033:0x7f292e095b19 [ 896.076867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.076888] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 896.076909] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 896.076923] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 896.076936] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 896.076949] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 896.076962] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 896.076990] 06:20:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1b) [ 896.129623] FAULT_INJECTION: forcing a failure. [ 896.129623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.131544] CPU: 0 UID: 0 PID: 8543 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 896.131573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.131586] Call Trace: [ 896.131593] [ 896.131601] dump_stack_lvl+0xfa/0x120 [ 896.131642] should_fail_ex+0x4d7/0x5e0 [ 896.131678] _copy_from_user+0x30/0xd0 [ 896.131711] copy_from_sockptr_offset.constprop.0+0x167/0x1a0 [ 896.131745] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 896.131786] do_ipv6_setsockopt+0xbd2/0x4800 [ 896.131823] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 896.131868] ? lock_acquire+0xdf/0x2e0 [ 896.131891] ? get_pid_task+0x29/0x250 [ 896.131923] ? find_held_lock+0x2b/0x80 [ 896.131952] ? get_pid_task+0xfd/0x250 [ 896.131983] ? lock_release+0xc8/0x290 [ 896.132008] ? get_pid_task+0x107/0x250 [ 896.132039] ? proc_fail_nth_write+0x98/0x250 [ 896.132075] ? sock_has_perm+0x21d/0x2b0 [ 896.132100] ? __pfx_sock_has_perm+0x10/0x10 [ 896.132132] ipv6_setsockopt+0xcb/0x170 [ 896.132165] rawv6_setsockopt+0xc7/0x4f0 [ 896.132192] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 896.132221] ? selinux_socket_setsockopt+0x6e/0x90 [ 896.132246] ? sock_common_setsockopt+0x2f/0x110 [ 896.132284] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 896.132316] do_sock_setsockopt+0xf7/0x1e0 [ 896.132353] __sys_setsockopt+0x11f/0x1a0 [ 896.132385] __x64_sys_setsockopt+0xbe/0x160 [ 896.132412] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 896.132447] do_syscall_64+0xbf/0x360 [ 896.132469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.132491] RIP: 0033:0x7f9412794b19 [ 896.132508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.132528] RSP: 002b:00007f940fce9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 896.132549] RAX: ffffffffffffffda RBX: 00007f94128a8020 RCX: 00007f9412794b19 [ 896.132564] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000004 [ 896.132577] RBP: 00007f940fce91d0 R08: 0000000000000020 R09: 0000000000000000 [ 896.132590] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 896.132603] R13: 00007ffe48a4866f R14: 00007f940fce9300 R15: 0000000000022000 [ 896.132631] 06:20:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1c) 06:20:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 2) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:18 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 2) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:20:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1}, 0x20) (fail_nth: 2) 06:20:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1d) 06:20:18 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 1) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 896.576814] FAULT_INJECTION: forcing a failure. [ 896.576814] name failslab, interval 1, probability 0, space 0, times 0 [ 896.578485] CPU: 1 UID: 0 PID: 8571 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 896.578514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.578526] Call Trace: [ 896.578533] [ 896.578541] dump_stack_lvl+0xfa/0x120 [ 896.578580] should_fail_ex+0x4d7/0x5e0 [ 896.578615] should_failslab+0xc2/0x120 [ 896.578636] __kmalloc_cache_noprof+0x73/0x4a0 [ 896.578667] ? alloc_pipe_info+0x10d/0x5a0 [ 896.578687] ? __pfx_visit_groups_merge.constprop.0.isra.0+0x10/0x10 [ 896.578738] ? alloc_pipe_info+0x10d/0x5a0 [ 896.578758] alloc_pipe_info+0x10d/0x5a0 [ 896.578781] splice_direct_to_actor+0x78c/0x9d0 [ 896.578809] ? __lock_acquire+0x694/0x1b70 [ 896.578830] ? __pfx_direct_splice_actor+0x10/0x10 [ 896.578863] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 896.578892] ? lock_acquire+0xdf/0x2e0 [ 896.578917] do_splice_direct+0x179/0x250 [ 896.578944] ? __pfx_do_splice_direct+0x10/0x10 [ 896.578971] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 896.579012] ? security_file_permission+0x22/0x90 [ 896.579039] do_sendfile+0xa8e/0xdc0 [ 896.579075] ? __pfx_do_sendfile+0x10/0x10 [ 896.579104] ? __pfx___schedule+0x10/0x10 [ 896.579131] ? __fget_files+0x20d/0x3b0 [ 896.579164] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 896.579202] __x64_sys_sendfile64+0x1d3/0x210 [ 896.579225] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 896.579256] do_syscall_64+0xbf/0x360 [ 896.579277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.579299] RIP: 0033:0x7f96d1de2b19 [ 896.579316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.579336] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 896.579357] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 896.579372] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 896.579384] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 896.579397] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 896.579410] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 896.579438] 06:20:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, 0x0, 0x0) (fail_nth: 1) 06:20:28 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 3) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:28 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:20:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 3) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1}, 0x20) (fail_nth: 3) 06:20:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1e) 06:20:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x2}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:20:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 906.043670] FAULT_INJECTION: forcing a failure. [ 906.043670] name failslab, interval 1, probability 0, space 0, times 0 [ 906.044753] CPU: 0 UID: 0 PID: 8585 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 906.044769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 906.044776] Call Trace: [ 906.044781] [ 906.044785] dump_stack_lvl+0xfa/0x120 [ 906.044810] should_fail_ex+0x4d7/0x5e0 [ 906.044831] ? alloc_pipe_info+0x1e8/0x5a0 [ 906.044843] should_failslab+0xc2/0x120 [ 906.044856] __kmalloc_noprof+0xb4/0x4c0 [ 906.044877] alloc_pipe_info+0x1e8/0x5a0 [ 906.044890] splice_direct_to_actor+0x78c/0x9d0 [ 906.044907] ? __pfx_direct_splice_actor+0x10/0x10 [ 906.044922] ? lock_acquire+0xc2/0x2e0 [ 906.044938] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 906.044954] ? lock_acquire+0xdf/0x2e0 [ 906.044969] do_splice_direct+0x179/0x250 [ 906.044983] ? __pfx_do_splice_direct+0x10/0x10 [ 906.044998] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 906.045015] ? security_file_permission+0x22/0x90 [ 906.045031] do_sendfile+0xa8e/0xdc0 [ 906.045052] ? __pfx_do_sendfile+0x10/0x10 [ 906.045070] ? perf_trace_preemptirq_template+0x259/0x430 [ 906.045093] __x64_sys_sendfile64+0x1d3/0x210 [ 906.045106] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 906.045127] do_syscall_64+0xbf/0x360 [ 906.045142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.045155] RIP: 0033:0x7f4188335b19 [ 906.045164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.045175] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 906.045187] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 906.045195] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 906.045202] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 906.045209] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 906.045216] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 906.045233] [ 906.102408] FAULT_INJECTION: forcing a failure. [ 906.102408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.104364] CPU: 1 UID: 0 PID: 8596 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 906.104393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 906.104406] Call Trace: [ 906.104413] [ 906.104422] dump_stack_lvl+0xfa/0x120 [ 906.104469] should_fail_ex+0x4d7/0x5e0 [ 906.104507] _copy_to_user+0x32/0xd0 [ 906.104534] simple_read_from_buffer+0xe0/0x180 [ 906.104567] proc_fail_nth_read+0x189/0x270 [ 906.104601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.104634] ? security_file_permission+0x22/0x90 [ 906.104659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.104691] vfs_read+0x1eb/0xbe0 06:20:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 4) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 906.104736] ? __pfx_vfs_read+0x10/0x10 [ 906.104769] ? lock_release+0xc8/0x290 [ 906.104799] ? __fget_files+0x20d/0x3b0 [ 906.104842] ksys_read+0x121/0x240 [ 906.104872] ? __pfx_ksys_read+0x10/0x10 [ 906.104915] do_syscall_64+0xbf/0x360 [ 906.104938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.104961] RIP: 0033:0x7f48f15b569c [ 906.104977] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 906.104998] RSP: 002b:00007f48eeb78170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 906.105019] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f48f15b569c [ 906.105034] RDX: 000000000000000f RSI: 00007f48eeb781e0 RDI: 0000000000000005 [ 906.105047] RBP: 00007f48eeb781d0 R08: 0000000000000000 R09: 0000000000000000 [ 906.105060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.105073] R13: 00007ffd13de940f R14: 00007f48eeb78300 R15: 0000000000022000 [ 906.105105] [ 906.131228] FAULT_INJECTION: forcing a failure. [ 906.131228] name failslab, interval 1, probability 0, space 0, times 0 [ 906.132856] CPU: 1 UID: 0 PID: 8597 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 906.132884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 906.132896] Call Trace: 06:20:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x5}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 906.132902] [ 906.132911] dump_stack_lvl+0xfa/0x120 [ 906.132946] should_fail_ex+0x4d7/0x5e0 [ 906.132981] ? alloc_pipe_info+0x1e8/0x5a0 [ 906.132999] should_failslab+0xc2/0x120 [ 906.133022] __kmalloc_noprof+0xb4/0x4c0 [ 906.133060] alloc_pipe_info+0x1e8/0x5a0 [ 906.133084] splice_direct_to_actor+0x78c/0x9d0 [ 906.133114] ? __pfx_direct_splice_actor+0x10/0x10 [ 906.133141] ? lock_acquire+0xc2/0x2e0 [ 906.133167] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 906.133198] ? lock_acquire+0xdf/0x2e0 [ 906.133225] do_splice_direct+0x179/0x250 [ 906.133252] ? __pfx_do_splice_direct+0x10/0x10 [ 906.133280] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 906.133311] ? security_file_permission+0x22/0x90 [ 906.133342] do_sendfile+0xa8e/0xdc0 [ 906.133379] ? __pfx_do_sendfile+0x10/0x10 [ 906.133409] ? __fget_files+0x20d/0x3b0 [ 906.133450] __x64_sys_sendfile64+0x1d3/0x210 [ 906.133474] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 906.133507] do_syscall_64+0xbf/0x360 [ 906.133529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.133551] RIP: 0033:0x7f292e095b19 [ 906.133567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.133587] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 906.133607] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 906.133622] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 906.133634] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 906.133647] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 906.133660] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 906.133699] 06:20:28 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x21) 06:20:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1}, 0x20) (fail_nth: 4) 06:20:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 5) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, 0x0, 0x0) 06:20:28 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 4) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 906.329257] FAULT_INJECTION: forcing a failure. [ 906.329257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.330464] CPU: 0 UID: 0 PID: 8617 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 906.330481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 906.330488] Call Trace: [ 906.330493] [ 906.330498] dump_stack_lvl+0xfa/0x120 [ 906.330527] should_fail_ex+0x4d7/0x5e0 [ 906.330555] _copy_from_user+0x30/0xd0 [ 906.330574] copy_from_sockptr_offset.constprop.0+0x167/0x1a0 [ 906.330595] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 906.330619] ? ipv6_setsockopt+0xcb/0x170 [ 906.330645] do_ipv6_setsockopt+0x26ab/0x4800 [ 906.330677] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 906.330720] ? perf_trace_run_bpf_submit+0xef/0x180 [ 906.330743] ? perf_trace_run_bpf_submit+0xef/0x180 [ 906.330778] ? perf_trace_run_bpf_submit+0xef/0x180 [ 906.330793] ? perf_trace_run_bpf_submit+0xef/0x180 [ 906.330820] ? perf_trace_lock+0x337/0x5d0 [ 906.330833] ? sock_has_perm+0x21d/0x2b0 [ 906.330850] ? __pfx_sock_has_perm+0x10/0x10 [ 906.330878] ipv6_setsockopt+0xcb/0x170 [ 906.330902] rawv6_setsockopt+0xc7/0x4f0 [ 906.330921] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 906.330941] ? selinux_socket_setsockopt+0x6e/0x90 [ 906.330955] ? sock_common_setsockopt+0x2f/0x110 [ 906.330981] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 906.331000] do_sock_setsockopt+0xf7/0x1e0 [ 906.331029] __sys_setsockopt+0x11f/0x1a0 [ 906.331056] __x64_sys_setsockopt+0xbe/0x160 [ 906.331071] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 906.331105] do_syscall_64+0xbf/0x360 [ 906.331122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.331136] RIP: 0033:0x7f9412794b19 [ 906.331146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.331157] RSP: 002b:00007f940fd0a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 906.331169] RAX: ffffffffffffffda RBX: 00007f94128a7f60 RCX: 00007f9412794b19 [ 906.331177] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000004 [ 906.331184] RBP: 00007f940fd0a1d0 R08: 0000000000000020 R09: 0000000000000000 [ 906.331191] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 906.331198] R13: 00007ffe48a4866f R14: 00007f940fd0a300 R15: 0000000000022000 [ 906.331233] [ 906.359295] FAULT_INJECTION: forcing a failure. [ 906.359295] name failslab, interval 1, probability 0, space 0, times 0 [ 906.360455] CPU: 0 UID: 0 PID: 8621 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 906.360471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 906.360477] Call Trace: [ 906.360481] [ 906.360485] dump_stack_lvl+0xfa/0x120 [ 906.360506] should_fail_ex+0x4d7/0x5e0 [ 906.360525] ? copy_splice_read+0x15b/0xb70 [ 906.360539] should_failslab+0xc2/0x120 [ 906.360551] __kmalloc_noprof+0xb4/0x4c0 [ 906.360567] ? __pfx_perf_trace_lock+0x10/0x10 [ 906.360585] copy_splice_read+0x15b/0xb70 [ 906.360599] ? __memcg_slab_post_alloc_hook+0x4a2/0x9d0 [ 906.360617] ? lock_release+0xc8/0x290 [ 906.360631] ? __pfx_copy_splice_read+0x10/0x10 [ 906.360645] ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0 [ 906.360663] ? look_up_lock_class+0x56/0x150 [ 906.360682] ? register_lock_class+0x41/0x560 [ 906.360698] ? lockdep_init_map_type+0x4b/0x240 [ 906.360712] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 906.360731] ? __pfx_copy_splice_read+0x10/0x10 [ 906.360746] do_splice_read+0x1f8/0x2a0 [ 906.360761] splice_direct_to_actor+0x2a8/0x9d0 [ 906.360777] ? __pfx_direct_splice_actor+0x10/0x10 [ 906.360795] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 906.360812] ? lock_acquire+0xdf/0x2e0 [ 906.360826] do_splice_direct+0x179/0x250 [ 906.360841] ? __pfx_do_splice_direct+0x10/0x10 [ 906.360856] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 906.360872] ? security_file_permission+0x22/0x90 [ 906.360889] do_sendfile+0xa8e/0xdc0 [ 906.360909] ? __pfx_do_sendfile+0x10/0x10 [ 906.360928] ? perf_trace_preemptirq_template+0x259/0x430 [ 906.360950] __x64_sys_sendfile64+0x1d3/0x210 [ 906.360963] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 906.360981] do_syscall_64+0xbf/0x360 [ 906.360993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.361004] RIP: 0033:0x7f4188335b19 [ 906.361013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.361024] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 906.361035] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 906.361043] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 906.361050] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 906.361057] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 906.361064] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 906.361081] 06:20:37 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 3) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:20:37 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 5) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x500}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:20:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x22) 06:20:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1}, 0x20) (fail_nth: 5) 06:20:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x3a, 0x14, 0x0, 0x0) 06:20:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 6) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 915.079293] FAULT_INJECTION: forcing a failure. [ 915.079293] name failslab, interval 1, probability 0, space 0, times 0 [ 915.080240] CPU: 1 UID: 0 PID: 8636 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 915.080256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 915.080264] Call Trace: [ 915.080268] [ 915.080273] dump_stack_lvl+0xfa/0x120 [ 915.080298] should_fail_ex+0x4d7/0x5e0 [ 915.080319] ? alloc_pipe_info+0x1e8/0x5a0 [ 915.080331] should_failslab+0xc2/0x120 [ 915.080343] __kmalloc_noprof+0xb4/0x4c0 [ 915.080364] alloc_pipe_info+0x1e8/0x5a0 [ 915.080376] splice_direct_to_actor+0x78c/0x9d0 [ 915.080394] ? __lock_acquire+0x694/0x1b70 [ 915.080408] ? __pfx_direct_splice_actor+0x10/0x10 [ 915.080422] ? lock_acquire+0xc2/0x2e0 [ 915.080435] ? find_held_lock+0x2b/0x80 [ 915.080452] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 915.080468] ? lock_acquire+0xdf/0x2e0 [ 915.080481] do_splice_direct+0x179/0x250 [ 915.080495] ? __pfx_do_splice_direct+0x10/0x10 [ 915.080510] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 915.080526] ? security_file_permission+0x22/0x90 [ 915.080542] do_sendfile+0xa8e/0xdc0 [ 915.080562] ? __pfx_do_sendfile+0x10/0x10 [ 915.080578] ? __fget_files+0x20d/0x3b0 [ 915.080600] __x64_sys_sendfile64+0x1d3/0x210 [ 915.080612] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 915.080630] do_syscall_64+0xbf/0x360 [ 915.080643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.080656] RIP: 0033:0x7f96d1de2b19 [ 915.080665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 915.080676] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 915.080687] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 915.080700] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 915.080706] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 915.080714] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 915.080721] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 915.080736] [ 915.100382] FAULT_INJECTION: forcing a failure. [ 915.100382] name failslab, interval 1, probability 0, space 0, times 0 [ 915.101291] CPU: 1 UID: 0 PID: 8637 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 915.101307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 915.101313] Call Trace: [ 915.101317] [ 915.101322] dump_stack_lvl+0xfa/0x120 [ 915.101342] should_fail_ex+0x4d7/0x5e0 [ 915.101360] ? copy_splice_read+0x15b/0xb70 [ 915.101373] should_failslab+0xc2/0x120 [ 915.101384] __kmalloc_noprof+0xb4/0x4c0 [ 915.101399] ? mod_objcg_mlstate+0x16d/0x2a0 [ 915.101414] copy_splice_read+0x15b/0xb70 [ 915.101429] ? __memcg_slab_post_alloc_hook+0x4a2/0x9d0 [ 915.101446] ? lock_release+0xc8/0x290 [ 915.101459] ? __pfx_copy_splice_read+0x10/0x10 [ 915.101473] ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0 [ 915.101491] ? look_up_lock_class+0x56/0x150 [ 915.101510] ? register_lock_class+0x41/0x560 [ 915.101522] ? lockdep_init_map_type+0x4b/0x240 [ 915.101536] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 915.101555] ? __pfx_copy_splice_read+0x10/0x10 [ 915.101569] do_splice_read+0x1f8/0x2a0 [ 915.101585] splice_direct_to_actor+0x2a8/0x9d0 [ 915.101601] ? __pfx_direct_splice_actor+0x10/0x10 [ 915.101619] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 915.101635] ? lock_acquire+0xdf/0x2e0 [ 915.101649] do_splice_direct+0x179/0x250 [ 915.101664] ? __pfx_do_splice_direct+0x10/0x10 [ 915.101679] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 915.101699] ? security_file_permission+0x22/0x90 [ 915.101714] do_sendfile+0xa8e/0xdc0 [ 915.101733] ? __pfx_do_sendfile+0x10/0x10 [ 915.101749] ? __fget_files+0x20d/0x3b0 [ 915.101770] __x64_sys_sendfile64+0x1d3/0x210 [ 915.101783] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 915.101800] do_syscall_64+0xbf/0x360 [ 915.101813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.101824] RIP: 0033:0x7f292e095b19 [ 915.101834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 915.101845] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 915.101856] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 915.101864] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 915.101871] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 915.101878] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 915.101886] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 915.101901] [ 915.185589] FAULT_INJECTION: forcing a failure. [ 915.185589] name failslab, interval 1, probability 0, space 0, times 0 [ 915.187982] CPU: 0 UID: 0 PID: 8647 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 915.188014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 915.188027] Call Trace: [ 915.188036] [ 915.188047] dump_stack_lvl+0xfa/0x120 [ 915.188096] should_fail_ex+0x4d7/0x5e0 [ 915.188131] ? lock_acquire+0xdf/0x2e0 [ 915.188168] ? sock_kmalloc+0x111/0x170 [ 915.188203] should_failslab+0xc2/0x120 [ 915.188231] __kmalloc_noprof+0xb4/0x4c0 [ 915.188261] ? lock_release+0xc8/0x290 [ 915.188291] ? __might_fault+0xe0/0x190 [ 915.188332] sock_kmalloc+0x111/0x170 [ 915.188381] ipv6_renew_options+0x278/0x950 [ 915.188417] ? copy_from_sockptr_offset.constprop.0+0xe5/0x1a0 [ 915.188455] ? __pfx_ipv6_renew_options+0x10/0x10 [ 915.188507] ? lock_is_held_type+0x9e/0x120 [ 915.188558] do_ipv6_setsockopt+0x2794/0x4800 [ 915.188620] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 915.188704] ? perf_trace_run_bpf_submit+0xef/0x180 [ 915.188748] ? perf_trace_run_bpf_submit+0xef/0x180 [ 915.188817] ? perf_trace_run_bpf_submit+0xef/0x180 [ 915.188848] ? perf_trace_run_bpf_submit+0xef/0x180 [ 915.188902] ? perf_trace_lock+0x337/0x5d0 [ 915.188926] ? sock_has_perm+0x21d/0x2b0 [ 915.188957] ? __pfx_sock_has_perm+0x10/0x10 [ 915.189013] ipv6_setsockopt+0xcb/0x170 [ 915.189061] rawv6_setsockopt+0xc7/0x4f0 [ 915.189099] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 915.189139] ? selinux_socket_setsockopt+0x6e/0x90 [ 915.189167] ? sock_common_setsockopt+0x2f/0x110 [ 915.189215] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 915.189253] do_sock_setsockopt+0xf7/0x1e0 [ 915.189310] __sys_setsockopt+0x11f/0x1a0 [ 915.189363] __x64_sys_setsockopt+0xbe/0x160 [ 915.189394] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 915.189437] do_syscall_64+0xbf/0x360 [ 915.189468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.189493] RIP: 0033:0x7f9412794b19 [ 915.189513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 915.189535] RSP: 002b:00007f940fd0a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 915.189558] RAX: ffffffffffffffda RBX: 00007f94128a7f60 RCX: 00007f9412794b19 [ 915.189574] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000004 [ 915.189588] RBP: 00007f940fd0a1d0 R08: 0000000000000020 R09: 0000000000000000 [ 915.189602] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 915.189616] R13: 00007ffe48a4866f R14: 00007f940fd0a300 R15: 0000000000022000 [ 915.189692] 06:20:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1}, 0x20) (fail_nth: 6) 06:20:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 7) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 4) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:20:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x23) 06:20:46 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 6) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:20:46 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:20:46 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, 0x0, 0x0) [ 924.024556] FAULT_INJECTION: forcing a failure. [ 924.024556] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 924.026403] CPU: 0 UID: 0 PID: 8673 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 924.026432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.026445] Call Trace: [ 924.026452] [ 924.026461] dump_stack_lvl+0xfa/0x120 [ 924.026502] should_fail_ex+0x4d7/0x5e0 [ 924.026539] should_fail_alloc_page+0xe0/0x110 [ 924.026564] prepare_alloc_pages+0x1af/0x500 [ 924.026588] ? __pfx_perf_trace_lock+0x10/0x10 [ 924.026619] alloc_pages_bulk_noprof+0x130/0xf00 [ 924.026653] ? find_held_lock+0x2b/0x80 [ 924.026689] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 924.026724] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 924.026764] ? __kasan_kmalloc+0x7f/0x90 [ 924.026787] ? trace_kmalloc+0x1f/0xb0 [ 924.026808] ? __kmalloc_noprof+0x22b/0x4c0 [ 924.026836] ? __pfx_perf_trace_lock+0x10/0x10 [ 924.026867] copy_splice_read+0x192/0xb70 [ 924.026896] ? __memcg_slab_post_alloc_hook+0x4a2/0x9d0 [ 924.026928] ? lock_release+0xc8/0x290 [ 924.026952] ? __pfx_copy_splice_read+0x10/0x10 [ 924.026978] ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0 [ 924.027012] ? look_up_lock_class+0x56/0x150 [ 924.027051] ? register_lock_class+0x41/0x560 [ 924.027074] ? lockdep_init_map_type+0x4b/0x240 [ 924.027100] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 924.027133] ? __pfx_copy_splice_read+0x10/0x10 [ 924.027161] do_splice_read+0x1f8/0x2a0 [ 924.027190] splice_direct_to_actor+0x2a8/0x9d0 [ 924.027219] ? __pfx_direct_splice_actor+0x10/0x10 [ 924.027253] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 924.027308] ? lock_acquire+0xdf/0x2e0 06:20:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 924.027345] do_splice_direct+0x179/0x250 [ 924.027384] ? __pfx_do_splice_direct+0x10/0x10 [ 924.027414] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 924.027444] ? security_file_permission+0x22/0x90 [ 924.027474] do_sendfile+0xa8e/0xdc0 [ 924.027512] ? __pfx_do_sendfile+0x10/0x10 [ 924.027545] ? perf_trace_preemptirq_template+0x259/0x430 [ 924.027586] __x64_sys_sendfile64+0x1d3/0x210 [ 924.027610] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 924.027643] do_syscall_64+0xbf/0x360 [ 924.027666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.027688] RIP: 0033:0x7f4188335b19 [ 924.027705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 924.027725] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 924.027746] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 924.027761] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 924.027773] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 924.027786] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 924.027799] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 924.027831] 06:20:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x24) 06:20:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 8) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:46 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3, 0x0, 0x0) 06:20:46 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:20:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1}, 0x20) (fail_nth: 7) 06:20:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 5) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 924.273077] FAULT_INJECTION: forcing a failure. [ 924.273077] name failslab, interval 1, probability 0, space 0, times 0 [ 924.274887] CPU: 0 UID: 0 PID: 8688 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 924.274917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.274929] Call Trace: 06:20:46 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 7) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 924.274937] [ 924.274945] dump_stack_lvl+0xfa/0x120 [ 924.274987] should_fail_ex+0x4d7/0x5e0 [ 924.275023] ? iter_file_splice_write+0x1cd/0x10c0 [ 924.275051] should_failslab+0xc2/0x120 [ 924.275073] __kmalloc_noprof+0xb4/0x4c0 [ 924.275110] iter_file_splice_write+0x1cd/0x10c0 [ 924.275141] ? kfree+0x285/0x470 [ 924.275166] ? copy_splice_read+0x83d/0xb70 [ 924.275198] ? __pfx_iter_file_splice_write+0x10/0x10 [ 924.275227] ? __lock_acquire+0xc65/0x1b70 [ 924.275286] ? lock_is_held_type+0x9e/0x120 [ 924.275331] ? __pfx_iter_file_splice_write+0x10/0x10 [ 924.275374] direct_splice_actor+0x192/0x7b0 [ 924.275412] splice_direct_to_actor+0x347/0x9d0 [ 924.275440] ? __pfx_direct_splice_actor+0x10/0x10 [ 924.275473] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 924.275502] ? lock_acquire+0xdf/0x2e0 [ 924.275528] do_splice_direct+0x179/0x250 [ 924.275555] ? __pfx_do_splice_direct+0x10/0x10 [ 924.275582] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 924.275612] ? security_file_permission+0x22/0x90 [ 924.275641] do_sendfile+0xa8e/0xdc0 [ 924.275678] ? __pfx_do_sendfile+0x10/0x10 [ 924.275717] ? perf_trace_preemptirq_template+0x259/0x430 [ 924.275758] __x64_sys_sendfile64+0x1d3/0x210 [ 924.275781] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 924.275813] do_syscall_64+0xbf/0x360 [ 924.275835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.275858] RIP: 0033:0x7f4188335b19 [ 924.275874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 924.275895] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 924.275916] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 924.275930] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 924.275943] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 924.275956] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 924.275969] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 924.275998] [ 924.332598] FAULT_INJECTION: forcing a failure. [ 924.332598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.334370] CPU: 1 UID: 0 PID: 8695 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 924.334399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.334412] Call Trace: [ 924.334420] [ 924.334429] dump_stack_lvl+0xfa/0x120 [ 924.334472] should_fail_ex+0x4d7/0x5e0 [ 924.334511] _copy_to_user+0x32/0xd0 [ 924.334540] simple_read_from_buffer+0xe0/0x180 [ 924.334574] proc_fail_nth_read+0x189/0x270 [ 924.334609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.334642] ? security_file_permission+0x22/0x90 [ 924.334668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.334707] vfs_read+0x1eb/0xbe0 [ 924.334746] ? __pfx_vfs_read+0x10/0x10 [ 924.334779] ? lock_release+0xc8/0x290 [ 924.334808] ? __fget_files+0x20d/0x3b0 [ 924.334852] ksys_read+0x121/0x240 [ 924.334883] ? __pfx_ksys_read+0x10/0x10 [ 924.334926] do_syscall_64+0xbf/0x360 [ 924.334950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.334973] RIP: 0033:0x7f941274769c [ 924.334989] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 924.335011] RSP: 002b:00007f940fd0a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 924.335032] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f941274769c [ 924.335047] RDX: 000000000000000f RSI: 00007f940fd0a1e0 RDI: 0000000000000005 [ 924.335061] RBP: 00007f940fd0a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 924.335074] R10: 0000000020001200 R11: 0000000000000246 R12: 0000000000000001 [ 924.335087] R13: 00007ffe48a4866f R14: 00007f940fd0a300 R15: 0000000000022000 [ 924.335120] [ 924.368327] FAULT_INJECTION: forcing a failure. [ 924.368327] name failslab, interval 1, probability 0, space 0, times 0 [ 924.370000] CPU: 1 UID: 0 PID: 8696 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 924.370029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.370040] Call Trace: [ 924.370047] [ 924.370056] dump_stack_lvl+0xfa/0x120 [ 924.370091] should_fail_ex+0x4d7/0x5e0 [ 924.370124] ? copy_splice_read+0x15b/0xb70 [ 924.370149] should_failslab+0xc2/0x120 [ 924.370171] __kmalloc_noprof+0xb4/0x4c0 [ 924.370200] ? __pfx_perf_trace_lock+0x10/0x10 [ 924.370232] copy_splice_read+0x15b/0xb70 [ 924.370260] ? __memcg_slab_post_alloc_hook+0x4a2/0x9d0 [ 924.370292] ? lock_release+0xc8/0x290 [ 924.370316] ? __pfx_copy_splice_read+0x10/0x10 [ 924.370342] ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0 [ 924.370375] ? look_up_lock_class+0x56/0x150 [ 924.370409] ? register_lock_class+0x41/0x560 [ 924.370431] ? lockdep_init_map_type+0x4b/0x240 [ 924.370457] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 924.370491] ? __pfx_copy_splice_read+0x10/0x10 [ 924.370524] do_splice_read+0x1f8/0x2a0 [ 924.370553] splice_direct_to_actor+0x2a8/0x9d0 [ 924.370582] ? __pfx_direct_splice_actor+0x10/0x10 [ 924.370616] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 924.370646] ? lock_acquire+0xdf/0x2e0 [ 924.370673] do_splice_direct+0x179/0x250 [ 924.370706] ? __pfx_do_splice_direct+0x10/0x10 [ 924.370734] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 924.370764] ? security_file_permission+0x22/0x90 [ 924.370792] do_sendfile+0xa8e/0xdc0 [ 924.370829] ? __pfx_do_sendfile+0x10/0x10 [ 924.370859] ? __fget_files+0x20d/0x3b0 [ 924.370899] __x64_sys_sendfile64+0x1d3/0x210 [ 924.370923] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 924.370956] do_syscall_64+0xbf/0x360 [ 924.370978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.370999] RIP: 0033:0x7f96d1de2b19 [ 924.371015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 924.371035] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 924.371056] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 924.371070] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 924.371083] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 924.371095] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 924.371108] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 924.371140] 06:20:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2a) [ 924.517587] FAULT_INJECTION: forcing a failure. [ 924.517587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 924.519454] CPU: 0 UID: 0 PID: 8703 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 924.519484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.519496] Call Trace: [ 924.519503] [ 924.519511] dump_stack_lvl+0xfa/0x120 [ 924.519552] should_fail_ex+0x4d7/0x5e0 [ 924.519589] should_fail_alloc_page+0xe0/0x110 [ 924.519613] prepare_alloc_pages+0x1af/0x500 [ 924.519642] alloc_pages_bulk_noprof+0x130/0xf00 [ 924.519674] ? find_held_lock+0x2b/0x80 [ 924.519717] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 924.519745] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 924.519783] ? __kasan_kmalloc+0x7f/0x90 [ 924.519805] ? trace_kmalloc+0x1f/0xb0 [ 924.519826] ? __kmalloc_noprof+0x22b/0x4c0 [ 924.519855] ? lock_release+0xc8/0x290 [ 924.519882] copy_splice_read+0x192/0xb70 [ 924.519910] ? __memcg_slab_post_alloc_hook+0x4a2/0x9d0 [ 924.519942] ? lock_release+0xc8/0x290 [ 924.519965] ? __pfx_copy_splice_read+0x10/0x10 [ 924.519991] ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0 [ 924.520023] ? look_up_lock_class+0x56/0x150 [ 924.520056] ? register_lock_class+0x41/0x560 [ 924.520079] ? lockdep_init_map_type+0x4b/0x240 [ 924.520104] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 924.520138] ? __pfx_copy_splice_read+0x10/0x10 [ 924.520165] do_splice_read+0x1f8/0x2a0 [ 924.520193] splice_direct_to_actor+0x2a8/0x9d0 [ 924.520221] ? __pfx_direct_splice_actor+0x10/0x10 [ 924.520254] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 924.520283] ? lock_acquire+0xdf/0x2e0 [ 924.520308] do_splice_direct+0x179/0x250 [ 924.520335] ? __pfx_do_splice_direct+0x10/0x10 [ 924.520362] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 924.520392] ? security_file_permission+0x22/0x90 [ 924.520421] do_sendfile+0xa8e/0xdc0 [ 924.520456] ? __pfx_do_sendfile+0x10/0x10 [ 924.520489] ? perf_trace_preemptirq_template+0x259/0x430 [ 924.520528] __x64_sys_sendfile64+0x1d3/0x210 [ 924.520558] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 924.520604] do_syscall_64+0xbf/0x360 [ 924.520636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.520669] RIP: 0033:0x7f292e095b19 [ 924.520692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 924.520719] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 924.520747] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 924.520770] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 924.520790] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 924.520810] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 924.520831] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 924.520875] 06:20:54 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 8) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 6) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:20:54 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x5}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:20:54 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, 0x0) 06:20:54 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 9) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:20:54 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2b) 06:20:54 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000001200)={@private1}, 0x20) 06:20:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 932.546999] FAULT_INJECTION: forcing a failure. [ 932.546999] name failslab, interval 1, probability 0, space 0, times 0 [ 932.549117] CPU: 1 UID: 0 PID: 8713 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 932.549152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.549167] Call Trace: [ 932.549176] [ 932.549185] dump_stack_lvl+0xfa/0x120 [ 932.549232] should_fail_ex+0x4d7/0x5e0 [ 932.549274] ? iter_file_splice_write+0x1cd/0x10c0 [ 932.549307] should_failslab+0xc2/0x120 [ 932.549333] __kmalloc_noprof+0xb4/0x4c0 [ 932.549377] iter_file_splice_write+0x1cd/0x10c0 [ 932.549415] ? kfree+0x285/0x470 [ 932.549445] ? copy_splice_read+0x83d/0xb70 [ 932.549482] ? __pfx_iter_file_splice_write+0x10/0x10 [ 932.549518] ? __lock_acquire+0xc65/0x1b70 [ 932.549569] ? lock_is_held_type+0x9e/0x120 [ 932.549607] ? __pfx_iter_file_splice_write+0x10/0x10 [ 932.549643] direct_splice_actor+0x192/0x7b0 [ 932.549680] splice_direct_to_actor+0x347/0x9d0 [ 932.549722] ? __pfx_direct_splice_actor+0x10/0x10 [ 932.549762] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 932.549797] ? lock_acquire+0xdf/0x2e0 [ 932.549829] do_splice_direct+0x179/0x250 [ 932.549861] ? __pfx_do_splice_direct+0x10/0x10 [ 932.549894] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 932.549930] ? security_file_permission+0x22/0x90 [ 932.549964] do_sendfile+0xa8e/0xdc0 [ 932.550008] ? __pfx_do_sendfile+0x10/0x10 [ 932.550044] ? __fget_files+0x20d/0x3b0 [ 932.550092] __x64_sys_sendfile64+0x1d3/0x210 [ 932.550120] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 932.550158] do_syscall_64+0xbf/0x360 [ 932.550185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.550217] RIP: 0033:0x7f292e095b19 [ 932.550237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.550261] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 932.550286] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 932.550304] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 932.550319] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 932.550335] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 932.550350] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 932.550385] 06:21:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 7) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:21:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 10) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:06 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 9) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x3a, 0x39, &(0x7f0000001200)={@private1}, 0x20) 06:21:06 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x500}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:06 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2c) 06:21:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, 0x0, 0x0) [ 944.355945] FAULT_INJECTION: forcing a failure. [ 944.355945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 944.357890] CPU: 0 UID: 0 PID: 8741 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 944.357933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.357950] Call Trace: [ 944.357960] [ 944.357972] dump_stack_lvl+0xfa/0x120 [ 944.358030] should_fail_ex+0x4d7/0x5e0 [ 944.358083] should_fail_alloc_page+0xe0/0x110 [ 944.358117] prepare_alloc_pages+0x1af/0x500 [ 944.358160] alloc_pages_bulk_noprof+0x130/0xf00 [ 944.358206] ? find_held_lock+0x2b/0x80 [ 944.358258] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 944.358298] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 944.358357] ? __kasan_kmalloc+0x7f/0x90 [ 944.358390] ? trace_kmalloc+0x1f/0xb0 [ 944.358420] ? __kmalloc_noprof+0x22b/0x4c0 [ 944.358460] ? lock_release+0xc8/0x290 [ 944.358500] copy_splice_read+0x192/0xb70 [ 944.358540] ? __memcg_slab_post_alloc_hook+0x4a2/0x9d0 [ 944.358586] ? lock_release+0xc8/0x290 [ 944.358618] ? __pfx_copy_splice_read+0x10/0x10 [ 944.358656] ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0 [ 944.358714] ? look_up_lock_class+0x56/0x150 [ 944.358762] ? register_lock_class+0x41/0x560 [ 944.358795] ? lockdep_init_map_type+0x4b/0x240 [ 944.358831] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 944.358879] ? __pfx_copy_splice_read+0x10/0x10 [ 944.358918] do_splice_read+0x1f8/0x2a0 [ 944.358958] splice_direct_to_actor+0x2a8/0x9d0 [ 944.358997] ? __pfx_direct_splice_actor+0x10/0x10 [ 944.359044] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 944.359086] ? lock_acquire+0xdf/0x2e0 [ 944.359123] do_splice_direct+0x179/0x250 [ 944.359160] ? __pfx_do_splice_direct+0x10/0x10 [ 944.359199] ? __pfx_direct_file_splice_eof+0x10/0x10 06:21:06 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2d) [ 944.359243] ? security_file_permission+0x22/0x90 [ 944.359281] do_sendfile+0xa8e/0xdc0 [ 944.359334] ? __pfx_do_sendfile+0x10/0x10 [ 944.359383] ? perf_trace_preemptirq_template+0x259/0x430 [ 944.359438] __x64_sys_sendfile64+0x1d3/0x210 [ 944.359467] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 944.359533] do_syscall_64+0xbf/0x360 [ 944.359562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.359594] RIP: 0033:0x7f96d1de2b19 [ 944.359614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.359643] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 944.359672] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 944.359691] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 944.359708] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.359725] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 944.359743] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 944.359785] [ 944.425575] FAULT_INJECTION: forcing a failure. [ 944.425575] name failslab, interval 1, probability 0, space 0, times 0 [ 944.427901] CPU: 0 UID: 0 PID: 8755 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 944.427931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.427944] Call Trace: [ 944.427951] [ 944.427959] dump_stack_lvl+0xfa/0x120 [ 944.428000] should_fail_ex+0x4d7/0x5e0 [ 944.428036] ? jbd2__journal_start+0x193/0x6b0 [ 944.428060] should_failslab+0xc2/0x120 [ 944.428085] kmem_cache_alloc_noprof+0x5f/0x470 [ 944.428117] ? lock_is_held_type+0x9e/0x120 [ 944.428154] jbd2__journal_start+0x193/0x6b0 [ 944.428181] __ext4_journal_start_sb+0x325/0x5d0 [ 944.428214] ? ext4_dirty_inode+0xa5/0x130 [ 944.428252] ext4_dirty_inode+0xa5/0x130 [ 944.428286] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 944.428318] __mark_inode_dirty+0x1b7/0xd00 [ 944.428344] generic_update_time+0xcb/0xf0 [ 944.428381] file_modified+0x1f0/0x230 [ 944.428405] ext4_file_write_iter+0xca3/0x1990 [ 944.428446] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 944.428474] ? __kasan_kmalloc+0x7f/0x90 [ 944.428496] ? trace_kmalloc+0x1f/0xb0 [ 944.428517] ? __kmalloc_noprof+0x22b/0x4c0 [ 944.428545] ? splice_from_pipe_next.part.0+0x165/0x510 [ 944.428579] iter_file_splice_write+0x927/0x10c0 [ 944.428621] ? __pfx_iter_file_splice_write+0x10/0x10 [ 944.428673] ? lock_is_held_type+0x9e/0x120 [ 944.428710] ? __pfx_iter_file_splice_write+0x10/0x10 [ 944.428740] direct_splice_actor+0x192/0x7b0 [ 944.428770] splice_direct_to_actor+0x347/0x9d0 [ 944.428799] ? __pfx_direct_splice_actor+0x10/0x10 [ 944.428832] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 944.428861] ? lock_acquire+0xdf/0x2e0 [ 944.428890] do_splice_direct+0x179/0x250 [ 944.428916] ? __pfx_do_splice_direct+0x10/0x10 [ 944.428944] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 944.428974] ? security_file_permission+0x22/0x90 [ 944.429003] do_sendfile+0xa8e/0xdc0 [ 944.429039] ? __pfx_do_sendfile+0x10/0x10 [ 944.429069] ? __fget_files+0x20d/0x3b0 [ 944.429109] __x64_sys_sendfile64+0x1d3/0x210 [ 944.429131] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 944.429164] do_syscall_64+0xbf/0x360 [ 944.429186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.429208] RIP: 0033:0x7f4188335b19 [ 944.429225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.429245] RSP: 002b:00007f418588a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 944.429266] RAX: ffffffffffffffda RBX: 00007f4188449020 RCX: 00007f4188335b19 [ 944.429280] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 944.429293] RBP: 00007f418588a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.429306] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 944.429319] R13: 00007ffe0f1ddc4f R14: 00007f418588a300 R15: 0000000000022000 [ 944.429348] 06:21:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 8) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:21:06 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2e) 06:21:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, 0x0) 06:21:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x6, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 944.575082] FAULT_INJECTION: forcing a failure. [ 944.575082] name failslab, interval 1, probability 0, space 0, times 0 [ 944.575992] CPU: 0 UID: 0 PID: 8764 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 944.576009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.576016] Call Trace: [ 944.576021] [ 944.576026] dump_stack_lvl+0xfa/0x120 [ 944.576060] should_fail_ex+0x4d7/0x5e0 [ 944.576091] ? iter_file_splice_write+0x1cd/0x10c0 [ 944.576108] should_failslab+0xc2/0x120 [ 944.576121] __kmalloc_noprof+0xb4/0x4c0 [ 944.576142] iter_file_splice_write+0x1cd/0x10c0 [ 944.576160] ? kfree+0x285/0x470 [ 944.576173] ? copy_splice_read+0x83d/0xb70 [ 944.576190] ? __pfx_iter_file_splice_write+0x10/0x10 [ 944.576206] ? __lock_acquire+0xc65/0x1b70 [ 944.576230] ? lock_is_held_type+0x9e/0x120 [ 944.576248] ? __pfx_iter_file_splice_write+0x10/0x10 [ 944.576265] direct_splice_actor+0x192/0x7b0 [ 944.576282] splice_direct_to_actor+0x347/0x9d0 [ 944.576297] ? __pfx_direct_splice_actor+0x10/0x10 [ 944.576315] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 944.576331] ? lock_acquire+0xdf/0x2e0 [ 944.576346] do_splice_direct+0x179/0x250 [ 944.576361] ? __pfx_do_splice_direct+0x10/0x10 [ 944.576376] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 944.576392] ? security_file_permission+0x22/0x90 [ 944.576409] do_sendfile+0xa8e/0xdc0 [ 944.576430] ? __pfx_do_sendfile+0x10/0x10 [ 944.576451] ? perf_trace_preemptirq_template+0x259/0x430 [ 944.576475] __x64_sys_sendfile64+0x1d3/0x210 [ 944.576488] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 944.576506] do_syscall_64+0xbf/0x360 [ 944.576519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.576533] RIP: 0033:0x7f96d1de2b19 [ 944.576544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.576559] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 944.576572] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 944.576580] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 944.576586] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.576594] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000001 [ 944.576602] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 944.576619] 06:21:06 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, &(0x7f0000001200)={@private1}, 0x20) 06:21:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 9) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:21:06 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2f) 06:21:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 11) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:06 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x30) 06:21:06 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 10) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x7, 0x0, 0x0) 06:21:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3, &(0x7f0000001200)={@private1}, 0x20) [ 944.851745] FAULT_INJECTION: forcing a failure. [ 944.851745] name failslab, interval 1, probability 0, space 0, times 0 [ 944.852660] CPU: 0 UID: 0 PID: 8791 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 944.852677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.852685] Call Trace: [ 944.852696] [ 944.852701] dump_stack_lvl+0xfa/0x120 [ 944.852726] should_fail_ex+0x4d7/0x5e0 [ 944.852747] ? jbd2__journal_start+0x193/0x6b0 [ 944.852760] should_failslab+0xc2/0x120 [ 944.852774] kmem_cache_alloc_noprof+0x5f/0x470 [ 944.852791] ? lock_is_held_type+0x9e/0x120 [ 944.852814] jbd2__journal_start+0x193/0x6b0 [ 944.852829] __ext4_journal_start_sb+0x325/0x5d0 [ 944.852847] ? ext4_dirty_inode+0xa5/0x130 [ 944.852868] ext4_dirty_inode+0xa5/0x130 [ 944.852886] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 944.852903] __mark_inode_dirty+0x1b7/0xd00 [ 944.852918] generic_update_time+0xcb/0xf0 [ 944.852939] file_modified+0x1f0/0x230 [ 944.852952] ext4_file_write_iter+0xca3/0x1990 [ 944.852974] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 944.852990] ? __kasan_kmalloc+0x7f/0x90 [ 944.853003] ? trace_kmalloc+0x1f/0xb0 [ 944.853014] ? __kmalloc_noprof+0x22b/0x4c0 [ 944.853032] ? splice_from_pipe_next.part.0+0x165/0x510 [ 944.853060] iter_file_splice_write+0x927/0x10c0 [ 944.853092] ? __pfx_iter_file_splice_write+0x10/0x10 [ 944.853120] ? lock_is_held_type+0x9e/0x120 [ 944.853137] ? __pfx_iter_file_splice_write+0x10/0x10 [ 944.853153] direct_splice_actor+0x192/0x7b0 [ 944.853170] splice_direct_to_actor+0x347/0x9d0 [ 944.853185] ? __pfx_direct_splice_actor+0x10/0x10 [ 944.853203] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 944.853219] ? lock_acquire+0xdf/0x2e0 [ 944.853235] do_splice_direct+0x179/0x250 [ 944.853249] ? __pfx_do_splice_direct+0x10/0x10 [ 944.853264] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 944.853280] ? security_file_permission+0x22/0x90 [ 944.853296] do_sendfile+0xa8e/0xdc0 [ 944.853317] ? __pfx_do_sendfile+0x10/0x10 [ 944.853336] ? perf_trace_preemptirq_template+0x259/0x430 [ 944.853359] __x64_sys_sendfile64+0x1d3/0x210 [ 944.853372] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 944.853389] do_syscall_64+0xbf/0x360 [ 944.853402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.853415] RIP: 0033:0x7f292e095b19 [ 944.853424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.853435] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 944.853447] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 944.853455] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 944.853462] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.853469] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 944.853476] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 944.853493] 06:21:07 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:07 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x31) 06:21:17 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:21:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x5}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, &(0x7f0000001200)={@private1}, 0x20) 06:21:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x32) 06:21:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x8, 0x0, 0x0) 06:21:17 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 11) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 12) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 955.454343] FAULT_INJECTION: forcing a failure. [ 955.454343] name failslab, interval 1, probability 0, space 0, times 0 [ 955.456824] CPU: 1 UID: 0 PID: 8821 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 955.456863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 955.456878] Call Trace: [ 955.456887] [ 955.456897] dump_stack_lvl+0xfa/0x120 [ 955.456947] should_fail_ex+0x4d7/0x5e0 [ 955.456991] ? jbd2__journal_start+0x193/0x6b0 [ 955.457020] should_failslab+0xc2/0x120 [ 955.457046] kmem_cache_alloc_noprof+0x5f/0x470 [ 955.457084] ? lock_is_held_type+0x9e/0x120 [ 955.457131] jbd2__journal_start+0x193/0x6b0 [ 955.457166] __ext4_journal_start_sb+0x325/0x5d0 [ 955.457205] ? ext4_dirty_inode+0xa5/0x130 [ 955.457251] ext4_dirty_inode+0xa5/0x130 [ 955.457292] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 955.457331] __mark_inode_dirty+0x1b7/0xd00 [ 955.457364] generic_update_time+0xcb/0xf0 [ 955.457409] file_modified+0x1f0/0x230 [ 955.457438] ext4_file_write_iter+0xca3/0x1990 [ 955.457490] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 955.457523] ? __kasan_kmalloc+0x7f/0x90 [ 955.457550] ? trace_kmalloc+0x1f/0xb0 [ 955.457575] ? __kmalloc_noprof+0x22b/0x4c0 [ 955.457609] ? splice_from_pipe_next.part.0+0x165/0x510 [ 955.457653] iter_file_splice_write+0x927/0x10c0 [ 955.457716] ? __pfx_iter_file_splice_write+0x10/0x10 [ 955.457785] ? lock_is_held_type+0x9e/0x120 [ 955.457822] ? __pfx_iter_file_splice_write+0x10/0x10 [ 955.457859] direct_splice_actor+0x192/0x7b0 [ 955.457897] splice_direct_to_actor+0x347/0x9d0 [ 955.457933] ? __pfx_direct_splice_actor+0x10/0x10 [ 955.457974] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 955.458011] ? lock_acquire+0xdf/0x2e0 [ 955.458045] do_splice_direct+0x179/0x250 [ 955.458078] ? __pfx_do_splice_direct+0x10/0x10 [ 955.458112] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 955.458149] ? security_file_permission+0x22/0x90 [ 955.458185] do_sendfile+0xa8e/0xdc0 [ 955.458232] ? __pfx_do_sendfile+0x10/0x10 [ 955.458271] ? __fget_files+0x20d/0x3b0 [ 955.458323] __x64_sys_sendfile64+0x1d3/0x210 [ 955.458351] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 955.458393] do_syscall_64+0xbf/0x360 [ 955.458420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.458447] RIP: 0033:0x7f96d1de2b19 [ 955.458468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 955.458492] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 955.458517] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 955.458535] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 955.458550] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 955.458566] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 955.458581] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 955.458621] 06:21:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x33) [ 955.576513] FAULT_INJECTION: forcing a failure. [ 955.576513] name failslab, interval 1, probability 0, space 0, times 0 06:21:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x500}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 955.577626] CPU: 0 UID: 0 PID: 8836 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 955.577647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 955.577655] Call Trace: [ 955.577659] [ 955.577664] dump_stack_lvl+0xfa/0x120 [ 955.577693] should_fail_ex+0x4d7/0x5e0 [ 955.577715] ? jbd2__journal_start+0x193/0x6b0 [ 955.577728] should_failslab+0xc2/0x120 [ 955.577741] kmem_cache_alloc_noprof+0x5f/0x470 [ 955.577759] ? lock_is_held_type+0x9e/0x120 [ 955.577781] jbd2__journal_start+0x193/0x6b0 [ 955.577797] __ext4_journal_start_sb+0x325/0x5d0 [ 955.577815] ? ext4_file_write_iter+0xd74/0x1990 [ 955.577834] ext4_file_write_iter+0xd74/0x1990 [ 955.577857] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 955.577873] ? __kasan_kmalloc+0x7f/0x90 [ 955.577885] ? trace_kmalloc+0x1f/0xb0 [ 955.577897] ? __kmalloc_noprof+0x22b/0x4c0 [ 955.577912] ? splice_from_pipe_next.part.0+0x165/0x510 [ 955.577934] iter_file_splice_write+0x927/0x10c0 [ 955.577959] ? __pfx_iter_file_splice_write+0x10/0x10 [ 955.577989] ? lock_is_held_type+0x9e/0x120 [ 955.578006] ? __pfx_iter_file_splice_write+0x10/0x10 [ 955.578023] direct_splice_actor+0x192/0x7b0 [ 955.578040] splice_direct_to_actor+0x347/0x9d0 [ 955.578056] ? __pfx_direct_splice_actor+0x10/0x10 [ 955.578074] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 955.578091] ? lock_acquire+0xdf/0x2e0 [ 955.578107] do_splice_direct+0x179/0x250 [ 955.578122] ? __pfx_do_splice_direct+0x10/0x10 [ 955.578137] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 955.578154] ? security_file_permission+0x22/0x90 [ 955.578171] do_sendfile+0xa8e/0xdc0 [ 955.578194] ? __pfx_do_sendfile+0x10/0x10 [ 955.578210] ? __fget_files+0x20d/0x3b0 [ 955.578234] __x64_sys_sendfile64+0x1d3/0x210 [ 955.578247] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 955.578266] do_syscall_64+0xbf/0x360 [ 955.578279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.578292] RIP: 0033:0x7f4188335b19 [ 955.578302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 955.578313] RSP: 002b:00007f418588a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 955.578325] RAX: ffffffffffffffda RBX: 00007f4188449020 RCX: 00007f4188335b19 [ 955.578333] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 955.578340] RBP: 00007f418588a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 955.578347] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 955.578354] R13: 00007ffe0f1ddc4f R14: 00007f418588a300 R15: 0000000000022000 [ 955.578372] 06:21:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x35) 06:21:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0xb, 0x0, 0x0) 06:21:17 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 12) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:17 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x36) 06:21:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 955.796313] FAULT_INJECTION: forcing a failure. [ 955.796313] name failslab, interval 1, probability 0, space 0, times 0 [ 955.797997] CPU: 1 UID: 0 PID: 8856 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 955.798026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 955.798039] Call Trace: [ 955.798047] [ 955.798055] dump_stack_lvl+0xfa/0x120 [ 955.798095] should_fail_ex+0x4d7/0x5e0 [ 955.798130] ? jbd2__journal_start+0x193/0x6b0 [ 955.798153] should_failslab+0xc2/0x120 [ 955.798176] kmem_cache_alloc_noprof+0x5f/0x470 [ 955.798206] ? lock_is_held_type+0x9e/0x120 [ 955.798244] jbd2__journal_start+0x193/0x6b0 [ 955.798271] __ext4_journal_start_sb+0x325/0x5d0 [ 955.798303] ? ext4_file_write_iter+0xd74/0x1990 [ 955.798336] ext4_file_write_iter+0xd74/0x1990 [ 955.798375] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 955.798403] ? __kasan_kmalloc+0x7f/0x90 [ 955.798425] ? trace_kmalloc+0x1f/0xb0 [ 955.798445] ? __kmalloc_noprof+0x22b/0x4c0 [ 955.798474] ? splice_from_pipe_next.part.0+0x165/0x510 [ 955.798509] iter_file_splice_write+0x927/0x10c0 [ 955.798552] ? __pfx_iter_file_splice_write+0x10/0x10 [ 955.798603] ? lock_is_held_type+0x9e/0x120 [ 955.798634] ? __pfx_iter_file_splice_write+0x10/0x10 [ 955.798664] direct_splice_actor+0x192/0x7b0 [ 955.798702] splice_direct_to_actor+0x347/0x9d0 [ 955.798731] ? __pfx_direct_splice_actor+0x10/0x10 [ 955.798764] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 955.798793] ? lock_acquire+0xdf/0x2e0 [ 955.798822] do_splice_direct+0x179/0x250 [ 955.798848] ? __pfx_do_splice_direct+0x10/0x10 [ 955.798876] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 955.798906] ? security_file_permission+0x22/0x90 [ 955.798934] do_sendfile+0xa8e/0xdc0 [ 955.798972] ? __pfx_do_sendfile+0x10/0x10 [ 955.799002] ? __fget_files+0x20d/0x3b0 [ 955.799042] __x64_sys_sendfile64+0x1d3/0x210 [ 955.799065] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 955.799097] do_syscall_64+0xbf/0x360 [ 955.799119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.799142] RIP: 0033:0x7f292e095b19 [ 955.799158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 955.799179] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 955.799201] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 955.799215] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 955.799228] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 955.799241] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 955.799254] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 955.799283] 06:21:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 13) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:26 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 11) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:21:26 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x1000000}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, &(0x7f0000001200)={@private1}, 0x20) 06:21:26 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x37) 06:21:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xf, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, 0x0, 0x0) 06:21:26 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 13) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:26 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x38) 06:21:36 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 12) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:21:36 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 14) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xbd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x39) 06:21:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000001200)={@private1}, 0x20) 06:21:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2000000}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, 0x0, 0x0) 06:21:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 14) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 974.665160] FAULT_INJECTION: forcing a failure. [ 974.665160] name failslab, interval 1, probability 0, space 0, times 0 [ 974.666567] CPU: 1 UID: 0 PID: 8891 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 974.666590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.666601] Call Trace: [ 974.666606] [ 974.666613] dump_stack_lvl+0xfa/0x120 [ 974.666648] should_fail_ex+0x4d7/0x5e0 [ 974.666676] ? jbd2__journal_start+0x193/0x6b0 [ 974.666701] should_failslab+0xc2/0x120 [ 974.666725] kmem_cache_alloc_noprof+0x5f/0x470 [ 974.666749] ? lock_is_held_type+0x9e/0x120 [ 974.666779] jbd2__journal_start+0x193/0x6b0 [ 974.666801] __ext4_journal_start_sb+0x325/0x5d0 [ 974.666827] ? ext4_file_write_iter+0xd74/0x1990 [ 974.666853] ext4_file_write_iter+0xd74/0x1990 [ 974.666884] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 974.666906] ? __kasan_kmalloc+0x7f/0x90 [ 974.666924] ? trace_kmalloc+0x1f/0xb0 [ 974.666940] ? __kmalloc_noprof+0x22b/0x4c0 [ 974.666962] ? splice_from_pipe_next.part.0+0x165/0x510 [ 974.666990] iter_file_splice_write+0x927/0x10c0 [ 974.667024] ? __pfx_iter_file_splice_write+0x10/0x10 [ 974.667064] ? lock_is_held_type+0x9e/0x120 [ 974.667088] ? __pfx_iter_file_splice_write+0x10/0x10 [ 974.667112] direct_splice_actor+0x192/0x7b0 [ 974.667136] splice_direct_to_actor+0x347/0x9d0 [ 974.667159] ? __pfx_direct_splice_actor+0x10/0x10 [ 974.667185] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 974.667208] ? lock_acquire+0xdf/0x2e0 [ 974.667231] do_splice_direct+0x179/0x250 [ 974.667252] ? __pfx_do_splice_direct+0x10/0x10 [ 974.667273] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 974.667297] ? security_file_permission+0x22/0x90 [ 974.667320] do_sendfile+0xa8e/0xdc0 [ 974.667349] ? __pfx_do_sendfile+0x10/0x10 [ 974.667373] ? __fget_files+0x20d/0x3b0 [ 974.667406] __x64_sys_sendfile64+0x1d3/0x210 [ 974.667424] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 974.667449] do_syscall_64+0xbf/0x360 [ 974.667467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.667485] RIP: 0033:0x7f96d1de2b19 [ 974.667498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.667515] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 974.667531] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 974.667543] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 974.667553] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 974.667563] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 974.667573] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 974.667596] 06:21:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x3a) 06:21:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 974.765614] FAULT_INJECTION: forcing a failure. [ 974.765614] name failslab, interval 1, probability 0, space 0, times 0 [ 974.766724] CPU: 0 UID: 0 PID: 8900 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 974.766742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.766750] Call Trace: [ 974.766756] [ 974.766761] dump_stack_lvl+0xfa/0x120 [ 974.766788] should_fail_ex+0x4d7/0x5e0 [ 974.766812] should_failslab+0xc2/0x120 [ 974.766827] __kmalloc_cache_noprof+0x73/0x4a0 [ 974.766844] ? __ext4_journal_stop+0xe2/0x1f0 [ 974.766863] ? ext4_file_write_iter+0xdbd/0x1990 [ 974.766880] ? iter_file_splice_write+0x927/0x10c0 [ 974.766905] ? direct_splice_actor+0x192/0x7b0 [ 974.766926] ? splice_direct_to_actor+0x347/0x9d0 [ 974.766940] ? __iomap_dio_rw+0x270/0x1cf0 [ 974.766959] ? do_sendfile+0xa8e/0xdc0 [ 974.766981] ? __iomap_dio_rw+0x270/0x1cf0 [ 974.766998] __iomap_dio_rw+0x270/0x1cf0 [ 974.767021] ? perf_trace_preemptirq_template+0x259/0x430 [ 974.767046] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 974.767066] ? lock_release+0xc8/0x290 [ 974.767082] ? __pfx___iomap_dio_rw+0x10/0x10 [ 974.767103] ? mark_held_locks+0x49/0x80 [ 974.767119] ? kasan_quarantine_put+0x84/0x1e0 [ 974.767147] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 974.767163] ? __pfx_ext4_orphan_add+0x10/0x10 [ 974.767188] iomap_dio_rw+0x40/0xa0 [ 974.767209] ext4_file_write_iter+0xe0b/0x1990 [ 974.767235] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 974.767252] ? __kasan_kmalloc+0x7f/0x90 [ 974.767265] ? trace_kmalloc+0x1f/0xb0 [ 974.767278] ? __kmalloc_noprof+0x22b/0x4c0 [ 974.767295] ? splice_from_pipe_next.part.0+0x165/0x510 [ 974.767317] iter_file_splice_write+0x927/0x10c0 [ 974.767345] ? __pfx_iter_file_splice_write+0x10/0x10 [ 974.767379] ? lock_is_held_type+0x9e/0x120 [ 974.767400] ? __pfx_iter_file_splice_write+0x10/0x10 [ 974.767426] direct_splice_actor+0x192/0x7b0 [ 974.767453] splice_direct_to_actor+0x347/0x9d0 [ 974.767478] ? __pfx_direct_splice_actor+0x10/0x10 [ 974.767507] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 974.767534] ? lock_acquire+0xdf/0x2e0 [ 974.767553] do_splice_direct+0x179/0x250 [ 974.767569] ? __pfx_do_splice_direct+0x10/0x10 [ 974.767586] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 974.767605] ? security_file_permission+0x22/0x90 [ 974.767624] do_sendfile+0xa8e/0xdc0 [ 974.767647] ? __pfx_do_sendfile+0x10/0x10 [ 974.767668] ? perf_trace_preemptirq_template+0x259/0x430 [ 974.767699] __x64_sys_sendfile64+0x1d3/0x210 [ 974.767714] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 974.767735] do_syscall_64+0xbf/0x360 [ 974.767750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.767764] RIP: 0033:0x7f4188335b19 [ 974.767774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.767787] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 974.767814] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 974.767823] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 974.767831] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 974.767839] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 974.767846] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 974.767866] [ 974.772394] FAULT_INJECTION: forcing a failure. [ 974.772394] name failslab, interval 1, probability 0, space 0, times 0 [ 974.804175] CPU: 1 UID: 0 PID: 8904 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 974.804198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.804208] Call Trace: [ 974.804214] [ 974.804221] dump_stack_lvl+0xfa/0x120 [ 974.804255] should_fail_ex+0x4d7/0x5e0 [ 974.804284] should_failslab+0xc2/0x120 [ 974.804302] __kmalloc_cache_noprof+0x73/0x4a0 [ 974.804323] ? __ext4_journal_stop+0xe2/0x1f0 [ 974.804348] ? ext4_file_write_iter+0xdbd/0x1990 [ 974.804368] ? iter_file_splice_write+0x927/0x10c0 [ 974.804389] ? direct_splice_actor+0x192/0x7b0 [ 974.804407] ? splice_direct_to_actor+0x347/0x9d0 [ 974.804425] ? __iomap_dio_rw+0x270/0x1cf0 [ 974.804446] ? do_sendfile+0xa8e/0xdc0 [ 974.804469] ? do_syscall_64+0xbf/0x360 [ 974.804487] ? __iomap_dio_rw+0x270/0x1cf0 [ 974.804508] __iomap_dio_rw+0x270/0x1cf0 [ 974.804528] ? __pfx_perf_trace_lock+0x10/0x10 [ 974.804551] ? lock_acquire+0xdf/0x2e0 [ 974.804568] ? __virt_addr_valid+0x1c6/0x5d0 [ 974.804595] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 974.804621] ? lock_release+0xc8/0x290 [ 974.804637] ? __pfx___iomap_dio_rw+0x10/0x10 [ 974.804663] ? mark_held_locks+0x49/0x80 [ 974.804682] ? kasan_quarantine_put+0x84/0x1e0 [ 974.804721] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 974.804740] ? __pfx_ext4_orphan_add+0x10/0x10 [ 974.804770] iomap_dio_rw+0x40/0xa0 [ 974.804793] ext4_file_write_iter+0xe0b/0x1990 [ 974.804824] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 974.804844] ? __kasan_kmalloc+0x7f/0x90 [ 974.804861] ? trace_kmalloc+0x1f/0xb0 [ 974.804877] ? __kmalloc_noprof+0x22b/0x4c0 [ 974.804897] ? splice_from_pipe_next.part.0+0x165/0x510 [ 974.804923] iter_file_splice_write+0x927/0x10c0 [ 974.804956] ? __pfx_iter_file_splice_write+0x10/0x10 [ 974.804996] ? lock_is_held_type+0x9e/0x120 [ 974.805020] ? __pfx_iter_file_splice_write+0x10/0x10 [ 974.805043] direct_splice_actor+0x192/0x7b0 [ 974.805065] splice_direct_to_actor+0x347/0x9d0 [ 974.805086] ? __pfx_direct_splice_actor+0x10/0x10 [ 974.805111] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 974.805133] ? lock_acquire+0xdf/0x2e0 [ 974.805152] do_splice_direct+0x179/0x250 [ 974.805172] ? __pfx_do_splice_direct+0x10/0x10 [ 974.805192] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 974.805214] ? security_file_permission+0x22/0x90 [ 974.805237] do_sendfile+0xa8e/0xdc0 [ 974.805265] ? __pfx_do_sendfile+0x10/0x10 [ 974.805287] ? __fget_files+0x20d/0x3b0 [ 974.805318] __x64_sys_sendfile64+0x1d3/0x210 [ 974.805335] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 974.805360] do_syscall_64+0xbf/0x360 [ 974.805376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.805393] RIP: 0033:0x7f292e095b19 [ 974.805405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.805421] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 974.805437] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 974.805448] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 974.805457] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 974.805467] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 974.805476] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 974.805500] 06:21:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0x5000000}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x3b) 06:21:37 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 13) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:21:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, 0x0, 0x0) 06:21:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 15) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x300, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x7, &(0x7f0000001200)={@private1}, 0x20) 06:21:37 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 15) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0xa4ffffff}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x3c) 06:21:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x500, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:45 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 16) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x13, 0x0, 0x0) 06:21:45 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x8, &(0x7f0000001200)={@private1}, 0x20) 06:21:45 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 14) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:21:45 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x3e) 06:21:45 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 16) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x600, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1, 0x0, 0x0, 0xffffffa4}, 0x20) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 983.843839] FAULT_INJECTION: forcing a failure. [ 983.843839] name failslab, interval 1, probability 0, space 0, times 0 [ 983.844885] CPU: 0 UID: 0 PID: 8958 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 983.844902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 983.844909] Call Trace: [ 983.844914] [ 983.844918] dump_stack_lvl+0xfa/0x120 [ 983.844943] should_fail_ex+0x4d7/0x5e0 [ 983.844964] should_failslab+0xc2/0x120 [ 983.844976] __kmalloc_cache_noprof+0x73/0x4a0 [ 983.844991] ? __ext4_journal_stop+0xe2/0x1f0 [ 983.845009] ? ext4_file_write_iter+0xdbd/0x1990 [ 983.845023] ? iter_file_splice_write+0x927/0x10c0 [ 983.845038] ? direct_splice_actor+0x192/0x7b0 [ 983.845052] ? splice_direct_to_actor+0x347/0x9d0 [ 983.845065] ? __iomap_dio_rw+0x270/0x1cf0 [ 983.845080] ? do_sendfile+0xa8e/0xdc0 [ 983.845099] ? __iomap_dio_rw+0x270/0x1cf0 [ 983.845114] __iomap_dio_rw+0x270/0x1cf0 [ 983.845133] ? perf_trace_preemptirq_template+0x259/0x430 [ 983.845154] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 983.845172] ? lock_release+0xc8/0x290 [ 983.845186] ? __pfx___iomap_dio_rw+0x10/0x10 [ 983.845204] ? mark_held_locks+0x49/0x80 [ 983.845218] ? kasan_quarantine_put+0x84/0x1e0 [ 983.845240] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 983.845255] ? __pfx_ext4_orphan_add+0x10/0x10 [ 983.845276] iomap_dio_rw+0x40/0xa0 [ 983.845293] ext4_file_write_iter+0xe0b/0x1990 [ 983.845315] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 983.845330] ? __kasan_kmalloc+0x7f/0x90 [ 983.845341] ? trace_kmalloc+0x1f/0xb0 [ 983.845353] ? __kmalloc_noprof+0x22b/0x4c0 [ 983.845368] ? splice_from_pipe_next.part.0+0x165/0x510 [ 983.845387] iter_file_splice_write+0x927/0x10c0 [ 983.845409] ? __pfx_iter_file_splice_write+0x10/0x10 [ 983.845437] ? lock_is_held_type+0x9e/0x120 [ 983.845455] ? __pfx_iter_file_splice_write+0x10/0x10 [ 983.845472] direct_splice_actor+0x192/0x7b0 [ 983.845488] splice_direct_to_actor+0x347/0x9d0 [ 983.845503] ? __pfx_direct_splice_actor+0x10/0x10 [ 983.845521] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 983.845537] ? lock_acquire+0xdf/0x2e0 [ 983.845551] do_splice_direct+0x179/0x250 [ 983.845565] ? __pfx_do_splice_direct+0x10/0x10 [ 983.845580] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 983.845596] ? security_file_permission+0x22/0x90 [ 983.845612] do_sendfile+0xa8e/0xdc0 [ 983.845632] ? __pfx_do_sendfile+0x10/0x10 [ 983.845649] ? perf_trace_preemptirq_template+0x259/0x430 [ 983.845671] __x64_sys_sendfile64+0x1d3/0x210 [ 983.845683] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 983.845704] do_syscall_64+0xbf/0x360 [ 983.845717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.845730] RIP: 0033:0x7f96d1de2b19 [ 983.845743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 983.845754] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 983.845768] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 983.845777] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 983.845785] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 983.845792] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 983.845799] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 983.845815] 06:21:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x42) 06:21:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x700, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 983.920475] FAULT_INJECTION: forcing a failure. [ 983.920475] name failslab, interval 1, probability 0, space 0, times 0 [ 983.922608] CPU: 1 UID: 0 PID: 8961 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) 06:21:46 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 983.922640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 983.922654] Call Trace: [ 983.922662] [ 983.922671] dump_stack_lvl+0xfa/0x120 [ 983.922724] should_fail_ex+0x4d7/0x5e0 [ 983.922764] ? jbd2__journal_start+0x193/0x6b0 [ 983.922790] should_failslab+0xc2/0x120 [ 983.922815] kmem_cache_alloc_noprof+0x5f/0x470 [ 983.922848] ? lock_is_held_type+0x9e/0x120 [ 983.922892] jbd2__journal_start+0x193/0x6b0 [ 983.922923] __ext4_journal_start_sb+0x325/0x5d0 [ 983.922960] ? ext4_iomap_begin+0x5b8/0xe80 [ 983.922999] ext4_iomap_begin+0x5b8/0xe80 [ 983.923032] ? __pfx_perf_trace_lock+0x10/0x10 [ 983.923075] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 983.923109] ? mark_held_locks+0x49/0x80 [ 983.923139] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 983.923172] ? __create_object+0x59/0x80 [ 983.923201] ? __pfx_ext4_iomap_begin+0x10/0x10 06:21:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 15) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 983.923237] iomap_iter+0x54a/0xdb0 [ 983.923276] __iomap_dio_rw+0x6ac/0x1cf0 [ 983.923324] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 983.923361] ? lock_release+0xc8/0x290 [ 983.923386] ? __pfx___iomap_dio_rw+0x10/0x10 [ 983.923431] ? kasan_quarantine_put+0x84/0x1e0 [ 983.923481] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 983.923508] ? __pfx_ext4_orphan_add+0x10/0x10 [ 983.923552] iomap_dio_rw+0x40/0xa0 [ 983.923588] ext4_file_write_iter+0xe0b/0x1990 [ 983.923634] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 983.923665] ? __kasan_kmalloc+0x7f/0x90 [ 983.923689] ? trace_kmalloc+0x1f/0xb0 [ 983.923712] ? __kmalloc_noprof+0x22b/0x4c0 [ 983.923742] ? splice_from_pipe_next.part.0+0x165/0x510 [ 983.923782] iter_file_splice_write+0x927/0x10c0 [ 983.923832] ? __pfx_iter_file_splice_write+0x10/0x10 [ 983.923914] ? lock_is_held_type+0x9e/0x120 [ 983.923965] ? __pfx_iter_file_splice_write+0x10/0x10 [ 983.924010] direct_splice_actor+0x192/0x7b0 [ 983.924044] splice_direct_to_actor+0x347/0x9d0 [ 983.924076] ? __pfx_direct_splice_actor+0x10/0x10 [ 983.924113] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 983.924146] ? lock_acquire+0xdf/0x2e0 [ 983.924176] do_splice_direct+0x179/0x250 [ 983.924205] ? __pfx_do_splice_direct+0x10/0x10 [ 983.924235] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 983.924269] ? security_file_permission+0x22/0x90 [ 983.924301] do_sendfile+0xa8e/0xdc0 [ 983.924343] ? __pfx_do_sendfile+0x10/0x10 [ 983.924376] ? __fget_files+0x20d/0x3b0 [ 983.924422] __x64_sys_sendfile64+0x1d3/0x210 [ 983.924447] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 983.924484] do_syscall_64+0xbf/0x360 [ 983.924509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.924534] RIP: 0033:0x7f292e095b19 [ 983.924552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 983.924574] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 983.924597] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 983.924613] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 983.924626] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 983.924640] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 983.924654] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 983.924689] 06:21:46 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 983.999405] FAULT_INJECTION: forcing a failure. [ 983.999405] name failslab, interval 1, probability 0, space 0, times 0 [ 984.001216] CPU: 1 UID: 0 PID: 8964 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 984.001247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 984.001261] Call Trace: [ 984.001269] [ 984.001278] dump_stack_lvl+0xfa/0x120 [ 984.001322] should_fail_ex+0x4d7/0x5e0 [ 984.001362] ? jbd2__journal_start+0x193/0x6b0 [ 984.001387] should_failslab+0xc2/0x120 [ 984.001411] kmem_cache_alloc_noprof+0x5f/0x470 [ 984.001444] ? lock_is_held_type+0x9e/0x120 [ 984.001487] jbd2__journal_start+0x193/0x6b0 [ 984.001517] __ext4_journal_start_sb+0x325/0x5d0 [ 984.001552] ? ext4_iomap_begin+0x5b8/0xe80 [ 984.001592] ext4_iomap_begin+0x5b8/0xe80 [ 984.001624] ? __pfx_perf_trace_lock+0x10/0x10 [ 984.001667] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 984.001708] ? mark_held_locks+0x49/0x80 [ 984.001737] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 984.001769] ? __create_object+0x59/0x80 [ 984.001798] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 984.001834] iomap_iter+0x54a/0xdb0 [ 984.001872] __iomap_dio_rw+0x6ac/0x1cf0 [ 984.001920] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 984.001957] ? lock_release+0xc8/0x290 [ 984.001982] ? __pfx___iomap_dio_rw+0x10/0x10 [ 984.002027] ? kasan_quarantine_put+0x84/0x1e0 [ 984.002077] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 984.002103] ? __pfx_ext4_orphan_add+0x10/0x10 [ 984.002147] iomap_dio_rw+0x40/0xa0 [ 984.002183] ext4_file_write_iter+0xe0b/0x1990 [ 984.002229] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 984.002258] ? __kasan_kmalloc+0x7f/0x90 [ 984.002283] ? trace_kmalloc+0x1f/0xb0 [ 984.002305] ? __kmalloc_noprof+0x22b/0x4c0 [ 984.002336] ? splice_from_pipe_next.part.0+0x165/0x510 [ 984.002376] iter_file_splice_write+0x927/0x10c0 [ 984.002425] ? __pfx_iter_file_splice_write+0x10/0x10 [ 984.002486] ? lock_is_held_type+0x9e/0x120 [ 984.002519] ? __pfx_iter_file_splice_write+0x10/0x10 [ 984.002552] direct_splice_actor+0x192/0x7b0 [ 984.002586] splice_direct_to_actor+0x347/0x9d0 [ 984.002618] ? __pfx_direct_splice_actor+0x10/0x10 [ 984.002655] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 984.002688] ? lock_acquire+0xdf/0x2e0 [ 984.002717] do_splice_direct+0x179/0x250 [ 984.002746] ? __pfx_do_splice_direct+0x10/0x10 [ 984.002776] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 984.002810] ? security_file_permission+0x22/0x90 [ 984.002842] do_sendfile+0xa8e/0xdc0 [ 984.002883] ? __pfx_do_sendfile+0x10/0x10 [ 984.002920] ? perf_trace_preemptirq_template+0x259/0x430 [ 984.002964] __x64_sys_sendfile64+0x1d3/0x210 [ 984.002989] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 984.003026] do_syscall_64+0xbf/0x360 [ 984.003051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.003075] RIP: 0033:0x7f4188335b19 [ 984.003093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.003115] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 984.003137] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 984.003153] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 984.003167] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 984.003181] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 984.003195] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 984.003230] 06:21:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0xb, &(0x7f0000001200)={@private1}, 0x20) 06:21:55 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 17) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x15, 0x0, 0x0) 06:21:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x900, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:55 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 16) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:21:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 17) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:55 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x43) [ 993.815353] FAULT_INJECTION: forcing a failure. [ 993.815353] name failslab, interval 1, probability 0, space 0, times 0 06:21:55 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x46) [ 993.817428] CPU: 1 UID: 0 PID: 9002 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 993.817463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 993.817478] Call Trace: [ 993.817487] [ 993.817497] dump_stack_lvl+0xfa/0x120 [ 993.817546] should_fail_ex+0x4d7/0x5e0 [ 993.817590] ? jbd2__journal_start+0x193/0x6b0 [ 993.817617] should_failslab+0xc2/0x120 [ 993.817650] kmem_cache_alloc_noprof+0x5f/0x470 [ 993.817687] ? lock_is_held_type+0x9e/0x120 [ 993.817741] jbd2__journal_start+0x193/0x6b0 [ 993.817773] __ext4_journal_start_sb+0x325/0x5d0 [ 993.817813] ? ext4_iomap_begin+0x5b8/0xe80 [ 993.817855] ext4_iomap_begin+0x5b8/0xe80 [ 993.817908] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 993.817946] ? mark_held_locks+0x49/0x80 [ 993.817978] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 993.818014] ? __create_object+0x59/0x80 [ 993.818045] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 993.818085] iomap_iter+0x54a/0xdb0 [ 993.818125] __iomap_dio_rw+0x6ac/0x1cf0 [ 993.818175] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 993.818216] ? lock_release+0xc8/0x290 [ 993.818244] ? __pfx___iomap_dio_rw+0x10/0x10 [ 993.818291] ? kasan_quarantine_put+0x84/0x1e0 [ 993.818341] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 993.818371] ? __pfx_ext4_orphan_add+0x10/0x10 [ 993.818418] iomap_dio_rw+0x40/0xa0 [ 993.818457] ext4_file_write_iter+0xe0b/0x1990 [ 993.818505] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 993.818538] ? __kasan_kmalloc+0x7f/0x90 [ 993.818565] ? trace_kmalloc+0x1f/0xb0 [ 993.818589] ? __kmalloc_noprof+0x22b/0x4c0 [ 993.818624] ? splice_from_pipe_next.part.0+0x165/0x510 [ 993.818666] iter_file_splice_write+0x927/0x10c0 [ 993.818717] ? __pfx_iter_file_splice_write+0x10/0x10 06:21:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 993.818780] ? lock_is_held_type+0x9e/0x120 [ 993.818817] ? __pfx_iter_file_splice_write+0x10/0x10 [ 993.818853] direct_splice_actor+0x192/0x7b0 [ 993.818890] splice_direct_to_actor+0x347/0x9d0 06:21:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x48) [ 993.818925] ? __pfx_direct_splice_actor+0x10/0x10 [ 993.818964] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 993.819000] ? lock_acquire+0xdf/0x2e0 [ 993.819032] do_splice_direct+0x179/0x250 [ 993.819064] ? __pfx_do_splice_direct+0x10/0x10 [ 993.819097] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 993.819133] ? security_file_permission+0x22/0x90 [ 993.819168] do_sendfile+0xa8e/0xdc0 [ 993.819212] ? __pfx_do_sendfile+0x10/0x10 [ 993.819248] ? __fget_files+0x20d/0x3b0 [ 993.819297] __x64_sys_sendfile64+0x1d3/0x210 [ 993.819325] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 993.819363] do_syscall_64+0xbf/0x360 [ 993.819390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.819417] RIP: 0033:0x7f96d1de2b19 [ 993.819437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 993.819462] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 993.819488] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 993.819506] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 993.819521] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 993.819537] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 993.819552] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 993.819588] 06:21:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x49) 06:21:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:21:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:21:56 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 18) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:21:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x16, 0x0, 0x0) 06:21:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 17) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 994.071319] FAULT_INJECTION: forcing a failure. [ 994.071319] name failslab, interval 1, probability 0, space 0, times 0 [ 994.072435] CPU: 0 UID: 0 PID: 9028 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 994.072451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 994.072459] Call Trace: [ 994.072463] [ 994.072468] dump_stack_lvl+0xfa/0x120 [ 994.072494] should_fail_ex+0x4d7/0x5e0 [ 994.072515] ? ext4_find_extent+0x7f5/0xa00 [ 994.072527] should_failslab+0xc2/0x120 [ 994.072544] __kmalloc_noprof+0xb4/0x4c0 [ 994.072560] ? __is_insn_slot_addr+0x140/0x290 [ 994.072582] ext4_find_extent+0x7f5/0xa00 [ 994.072597] ext4_ext_map_blocks+0x1cc/0x5f30 [ 994.072614] ? __pfx_perf_tp_event+0x10/0x10 [ 994.072632] ? __pfx_perf_trace_lock+0x10/0x10 [ 994.072645] ? unwind_next_frame+0xb9/0x2540 [ 994.072666] ? lock_acquire+0xdf/0x2e0 [ 994.072678] ? unwind_next_frame+0xb9/0x2540 [ 994.072699] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 994.072711] ? unwind_next_frame+0x3b2/0x2540 [ 994.072731] ? look_up_lock_class+0x56/0x150 [ 994.072748] ? unwind_next_frame+0x3bc/0x2540 [ 994.072765] ? register_lock_class+0x41/0x560 [ 994.072780] ? __lock_acquire+0xc65/0x1b70 [ 994.072800] ? lock_acquire+0xdf/0x2e0 [ 994.072811] ? ext4_map_blocks+0x4b0/0x15a0 [ 994.072830] ext4_map_query_blocks+0x117/0x890 [ 994.072846] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 994.072860] ? __pfx_down_read+0x10/0x10 [ 994.072871] ? ext4_es_lookup_extent+0xc8/0xb20 [ 994.072891] ext4_map_blocks+0x4c3/0x15a0 [ 994.072911] ? __pfx_ext4_map_blocks+0x10/0x10 [ 994.072925] ? lock_is_held_type+0x9e/0x120 [ 994.072945] ? jbd2__journal_start+0xf6/0x6b0 [ 994.072961] ? __ext4_journal_start_sb+0x325/0x5d0 [ 994.072978] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 994.072994] ? ext4_iomap_begin+0x5b8/0xe80 [ 994.073014] ext4_iomap_begin+0xa62/0xe80 [ 994.073029] ? __pfx_perf_trace_lock+0x10/0x10 [ 994.073052] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 994.073072] ? mark_held_locks+0x49/0x80 [ 994.073086] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 994.073102] ? __create_object+0x59/0x80 [ 994.073118] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 994.073136] iomap_iter+0x54a/0xdb0 [ 994.073156] __iomap_dio_rw+0x6ac/0x1cf0 [ 994.073180] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 994.073198] ? lock_release+0xc8/0x290 [ 994.073211] ? __pfx___iomap_dio_rw+0x10/0x10 [ 994.073233] ? kasan_quarantine_put+0x84/0x1e0 [ 994.073259] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 994.073272] ? __pfx_ext4_orphan_add+0x10/0x10 [ 994.073294] iomap_dio_rw+0x40/0xa0 [ 994.073312] ext4_file_write_iter+0xe0b/0x1990 [ 994.073335] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 994.073350] ? __kasan_kmalloc+0x7f/0x90 [ 994.073362] ? trace_kmalloc+0x1f/0xb0 [ 994.073373] ? __kmalloc_noprof+0x22b/0x4c0 [ 994.073389] ? splice_from_pipe_next.part.0+0x165/0x510 [ 994.073410] iter_file_splice_write+0x927/0x10c0 [ 994.073435] ? __pfx_iter_file_splice_write+0x10/0x10 [ 994.073466] ? lock_is_held_type+0x9e/0x120 [ 994.073483] ? __pfx_iter_file_splice_write+0x10/0x10 [ 994.073499] direct_splice_actor+0x192/0x7b0 [ 994.073516] splice_direct_to_actor+0x347/0x9d0 [ 994.073532] ? __pfx_direct_splice_actor+0x10/0x10 [ 994.073551] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 994.073568] ? lock_acquire+0xdf/0x2e0 [ 994.073583] do_splice_direct+0x179/0x250 [ 994.073597] ? __pfx_do_splice_direct+0x10/0x10 [ 994.073613] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 994.073629] ? security_file_permission+0x22/0x90 [ 994.073646] do_sendfile+0xa8e/0xdc0 [ 994.073668] ? __pfx_do_sendfile+0x10/0x10 [ 994.073686] ? perf_trace_preemptirq_template+0x259/0x430 [ 994.073708] __x64_sys_sendfile64+0x1d3/0x210 [ 994.073721] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 994.073740] do_syscall_64+0xbf/0x360 [ 994.073753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.073765] RIP: 0033:0x7f292e095b19 [ 994.073775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 994.073786] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 994.073798] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 994.073806] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 994.073812] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 994.073819] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 994.073826] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 994.073844] 06:22:05 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 19) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x4a) 06:22:05 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 18) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:22:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, &(0x7f0000001200)={@private1}, 0x20) 06:22:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 18) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:05 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x7) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:22:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, 0x0, 0x0) 06:22:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xbd00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 1003.059322] FAULT_INJECTION: forcing a failure. [ 1003.059322] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.060369] CPU: 0 UID: 0 PID: 9062 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1003.060385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.060393] Call Trace: [ 1003.060397] [ 1003.060402] dump_stack_lvl+0xfa/0x120 [ 1003.060427] should_fail_ex+0x4d7/0x5e0 [ 1003.060448] ? ext4_find_extent+0x7f5/0xa00 [ 1003.060461] should_failslab+0xc2/0x120 [ 1003.060474] __kmalloc_noprof+0xb4/0x4c0 [ 1003.060490] ? __is_insn_slot_addr+0x140/0x290 [ 1003.060511] ext4_find_extent+0x7f5/0xa00 [ 1003.060526] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1003.060542] ? __pfx_perf_tp_event+0x10/0x10 [ 1003.060559] ? lock_acquire+0xdf/0x2e0 [ 1003.060572] ? unwind_next_frame+0xb9/0x2540 [ 1003.060593] ? lock_acquire+0xdf/0x2e0 [ 1003.060604] ? unwind_next_frame+0xb9/0x2540 [ 1003.060621] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1003.060633] ? unwind_next_frame+0x3b2/0x2540 [ 1003.060653] ? look_up_lock_class+0x56/0x150 [ 1003.060670] ? unwind_next_frame+0x3bc/0x2540 [ 1003.060691] ? register_lock_class+0x41/0x560 [ 1003.060706] ? __lock_acquire+0xc65/0x1b70 [ 1003.060724] ? lock_acquire+0xdf/0x2e0 [ 1003.060735] ? ext4_map_blocks+0x4b0/0x15a0 [ 1003.060757] ext4_map_query_blocks+0x117/0x890 [ 1003.060772] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1003.060786] ? __pfx_down_read+0x10/0x10 [ 1003.060798] ? ext4_es_lookup_extent+0xc8/0xb20 [ 1003.060817] ext4_map_blocks+0x4c3/0x15a0 [ 1003.060836] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1003.060850] ? lock_is_held_type+0x9e/0x120 [ 1003.060869] ? jbd2__journal_start+0xf6/0x6b0 [ 1003.060885] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1003.060902] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1003.060918] ? ext4_iomap_begin+0x5b8/0xe80 [ 1003.060938] ext4_iomap_begin+0xa62/0xe80 [ 1003.060961] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1003.060978] ? mark_held_locks+0x49/0x80 [ 1003.060991] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1003.061008] ? __create_object+0x59/0x80 [ 1003.061022] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1003.061040] iomap_iter+0x54a/0xdb0 [ 1003.061059] __iomap_dio_rw+0x6ac/0x1cf0 [ 1003.061082] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1003.061101] ? lock_release+0xc8/0x290 [ 1003.061113] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1003.061134] ? kasan_quarantine_put+0x84/0x1e0 [ 1003.061157] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1003.061170] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1003.061192] iomap_dio_rw+0x40/0xa0 [ 1003.061209] ext4_file_write_iter+0xe0b/0x1990 [ 1003.061231] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1003.061245] ? __kasan_kmalloc+0x7f/0x90 [ 1003.061259] ? trace_kmalloc+0x1f/0xb0 [ 1003.061271] ? __kmalloc_noprof+0x22b/0x4c0 [ 1003.061286] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1003.061305] iter_file_splice_write+0x927/0x10c0 [ 1003.061329] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1003.061357] ? lock_is_held_type+0x9e/0x120 [ 1003.061373] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1003.061390] direct_splice_actor+0x192/0x7b0 [ 1003.061406] splice_direct_to_actor+0x347/0x9d0 [ 1003.061422] ? __pfx_direct_splice_actor+0x10/0x10 [ 1003.061439] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1003.061455] ? lock_acquire+0xdf/0x2e0 [ 1003.061469] do_splice_direct+0x179/0x250 [ 1003.061484] ? __pfx_do_splice_direct+0x10/0x10 [ 1003.061499] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1003.061515] ? security_file_permission+0x22/0x90 [ 1003.061531] do_sendfile+0xa8e/0xdc0 [ 1003.061552] ? __pfx_do_sendfile+0x10/0x10 [ 1003.061569] ? perf_trace_preemptirq_template+0x259/0x430 [ 1003.061591] __x64_sys_sendfile64+0x1d3/0x210 [ 1003.061603] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1003.061621] do_syscall_64+0xbf/0x360 [ 1003.061633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.061645] RIP: 0033:0x7f96d1de2b19 [ 1003.061655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.061666] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1003.061678] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1003.061686] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1003.061692] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.061700] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.061707] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1003.061723] 06:22:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x4b) 06:22:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, 0x0, 0x0) 06:22:05 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 20) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 1003.147481] FAULT_INJECTION: forcing a failure. [ 1003.147481] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.148475] CPU: 0 UID: 0 PID: 9065 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1003.148491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.148499] Call Trace: [ 1003.148503] [ 1003.148508] dump_stack_lvl+0xfa/0x120 [ 1003.148533] should_fail_ex+0x4d7/0x5e0 [ 1003.148553] ? ext4_find_extent+0x7f5/0xa00 [ 1003.148565] should_failslab+0xc2/0x120 [ 1003.148578] __kmalloc_noprof+0xb4/0x4c0 [ 1003.148595] ? __is_insn_slot_addr+0x140/0x290 [ 1003.148616] ext4_find_extent+0x7f5/0xa00 [ 1003.148631] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1003.148647] ? __pfx_perf_tp_event+0x10/0x10 [ 1003.148664] ? lock_acquire+0xdf/0x2e0 [ 1003.148677] ? unwind_next_frame+0xb9/0x2540 [ 1003.148701] ? lock_acquire+0xdf/0x2e0 [ 1003.148713] ? unwind_next_frame+0xb9/0x2540 [ 1003.148730] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1003.148741] ? unwind_next_frame+0x3b2/0x2540 [ 1003.148761] ? look_up_lock_class+0x56/0x150 [ 1003.148778] ? unwind_next_frame+0x3bc/0x2540 [ 1003.148795] ? register_lock_class+0x41/0x560 [ 1003.148810] ? __lock_acquire+0xc65/0x1b70 [ 1003.148829] ? lock_acquire+0xdf/0x2e0 [ 1003.148840] ? ext4_map_blocks+0x4b0/0x15a0 [ 1003.148861] ext4_map_query_blocks+0x117/0x890 [ 1003.148877] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1003.148890] ? __pfx_down_read+0x10/0x10 [ 1003.148902] ? ext4_es_lookup_extent+0xc8/0xb20 [ 1003.148921] ext4_map_blocks+0x4c3/0x15a0 [ 1003.148940] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1003.148954] ? lock_is_held_type+0x9e/0x120 [ 1003.148973] ? jbd2__journal_start+0xf6/0x6b0 [ 1003.148989] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1003.149006] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1003.149022] ? ext4_iomap_begin+0x5b8/0xe80 [ 1003.149041] ext4_iomap_begin+0xa62/0xe80 [ 1003.149065] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1003.149082] ? mark_held_locks+0x49/0x80 [ 1003.149095] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1003.149112] ? __create_object+0x59/0x80 [ 1003.149127] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1003.149144] iomap_iter+0x54a/0xdb0 [ 1003.149164] __iomap_dio_rw+0x6ac/0x1cf0 [ 1003.149187] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1003.149205] ? lock_release+0xc8/0x290 [ 1003.149217] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1003.149239] ? kasan_quarantine_put+0x84/0x1e0 [ 1003.149262] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1003.149275] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1003.149297] iomap_dio_rw+0x40/0xa0 [ 1003.149314] ext4_file_write_iter+0xe0b/0x1990 [ 1003.149337] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1003.149351] ? __kasan_kmalloc+0x7f/0x90 [ 1003.149364] ? trace_kmalloc+0x1f/0xb0 [ 1003.149375] ? __kmalloc_noprof+0x22b/0x4c0 [ 1003.149391] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1003.149411] iter_file_splice_write+0x927/0x10c0 [ 1003.149434] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1003.149462] ? lock_is_held_type+0x9e/0x120 [ 1003.149479] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1003.149495] direct_splice_actor+0x192/0x7b0 [ 1003.149511] splice_direct_to_actor+0x347/0x9d0 [ 1003.149527] ? __pfx_direct_splice_actor+0x10/0x10 [ 1003.149545] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1003.149561] ? lock_acquire+0xdf/0x2e0 [ 1003.149575] do_splice_direct+0x179/0x250 [ 1003.149590] ? __pfx_do_splice_direct+0x10/0x10 [ 1003.149605] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1003.149621] ? security_file_permission+0x22/0x90 [ 1003.149637] do_sendfile+0xa8e/0xdc0 [ 1003.149658] ? __pfx_do_sendfile+0x10/0x10 [ 1003.149676] ? perf_trace_preemptirq_template+0x259/0x430 [ 1003.149697] __x64_sys_sendfile64+0x1d3/0x210 [ 1003.149710] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1003.149727] do_syscall_64+0xbf/0x360 [ 1003.149740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.149753] RIP: 0033:0x7f4188335b19 [ 1003.149762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.149774] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1003.149785] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1003.149793] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1003.149800] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.149807] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.149814] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1003.149830] [ 1003.228431] FAULT_INJECTION: forcing a failure. [ 1003.228431] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.229668] CPU: 0 UID: 0 PID: 9077 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1003.229685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.229695] Call Trace: [ 1003.229699] [ 1003.229704] dump_stack_lvl+0xfa/0x120 [ 1003.229729] should_fail_ex+0x4d7/0x5e0 [ 1003.229750] ? __es_insert_extent+0xed2/0x1370 [ 1003.229767] should_failslab+0xc2/0x120 [ 1003.229779] kmem_cache_alloc_noprof+0x5f/0x470 [ 1003.229796] ? __pfx___es_remove_extent+0x10/0x10 [ 1003.229809] ? ext4_file_write_iter+0xe0b/0x1990 [ 1003.229825] ? iter_file_splice_write+0x927/0x10c0 [ 1003.229843] __es_insert_extent+0xed2/0x1370 [ 1003.229858] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1003.229880] ext4_es_insert_extent+0x4d0/0x1100 [ 1003.229899] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1003.229917] ? lock_acquire+0xdf/0x2e0 [ 1003.229930] ? find_held_lock+0x2b/0x80 [ 1003.229946] ? ext4_es_find_extent_range+0x1cf/0x500 [ 1003.229960] ? lock_release+0xc8/0x290 [ 1003.229973] ? do_raw_read_unlock+0x44/0xe0 [ 1003.229991] ext4_ext_map_blocks+0x1797/0x5f30 [ 1003.230008] ? __pfx_perf_tp_event+0x10/0x10 [ 1003.230024] ? lock_acquire+0xdf/0x2e0 [ 1003.230036] ? unwind_next_frame+0xb9/0x2540 [ 1003.230056] ? lock_acquire+0xdf/0x2e0 [ 1003.230067] ? unwind_next_frame+0xb9/0x2540 [ 1003.230084] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1003.230096] ? unwind_next_frame+0x3b2/0x2540 [ 1003.230115] ? look_up_lock_class+0x56/0x150 [ 1003.230132] ? unwind_next_frame+0x3bc/0x2540 [ 1003.230149] ? register_lock_class+0x41/0x560 [ 1003.230163] ? __lock_acquire+0xc65/0x1b70 [ 1003.230182] ? lock_acquire+0xdf/0x2e0 [ 1003.230193] ? ext4_map_blocks+0x4b0/0x15a0 [ 1003.230212] ext4_map_query_blocks+0x117/0x890 [ 1003.230227] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1003.230241] ? __pfx_down_read+0x10/0x10 [ 1003.230253] ? ext4_es_lookup_extent+0xc8/0xb20 [ 1003.230271] ext4_map_blocks+0x4c3/0x15a0 [ 1003.230290] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1003.230304] ? lock_is_held_type+0x9e/0x120 [ 1003.230324] ? jbd2__journal_start+0xf6/0x6b0 [ 1003.230340] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1003.230358] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1003.230374] ? ext4_iomap_begin+0x5b8/0xe80 [ 1003.230393] ext4_iomap_begin+0xa62/0xe80 [ 1003.230416] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1003.230433] ? mark_held_locks+0x49/0x80 [ 1003.230447] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1003.230464] ? __create_object+0x59/0x80 [ 1003.230479] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1003.230496] iomap_iter+0x54a/0xdb0 [ 1003.230515] __iomap_dio_rw+0x6ac/0x1cf0 [ 1003.230538] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1003.230557] ? lock_release+0xc8/0x290 [ 1003.230569] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1003.230590] ? kasan_quarantine_put+0x84/0x1e0 [ 1003.230613] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1003.230626] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1003.230648] iomap_dio_rw+0x40/0xa0 [ 1003.230665] ext4_file_write_iter+0xe0b/0x1990 [ 1003.230687] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1003.230702] ? __kasan_kmalloc+0x7f/0x90 [ 1003.230714] ? trace_kmalloc+0x1f/0xb0 [ 1003.230725] ? __kmalloc_noprof+0x22b/0x4c0 [ 1003.230740] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1003.230759] iter_file_splice_write+0x927/0x10c0 [ 1003.230782] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1003.230811] ? lock_is_held_type+0x9e/0x120 [ 1003.230827] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1003.230843] direct_splice_actor+0x192/0x7b0 [ 1003.230860] splice_direct_to_actor+0x347/0x9d0 [ 1003.230875] ? __pfx_direct_splice_actor+0x10/0x10 [ 1003.230893] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1003.230909] ? lock_acquire+0xdf/0x2e0 [ 1003.230923] do_splice_direct+0x179/0x250 [ 1003.230938] ? __pfx_do_splice_direct+0x10/0x10 [ 1003.230953] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1003.230969] ? security_file_permission+0x22/0x90 [ 1003.230985] do_sendfile+0xa8e/0xdc0 [ 1003.231006] ? __pfx_do_sendfile+0x10/0x10 [ 1003.231024] ? perf_trace_preemptirq_template+0x259/0x430 [ 1003.231045] __x64_sys_sendfile64+0x1d3/0x210 [ 1003.231058] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1003.231075] do_syscall_64+0xbf/0x360 [ 1003.231088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.231101] RIP: 0033:0x7f292e095b19 [ 1003.231110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.231121] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1003.231133] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1003.231141] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1003.231148] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.231155] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.231161] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1003.231178] 06:22:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:05 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x8) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:22:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x4c) 06:22:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000001200)={@private1}, 0x20) [ 1003.444889] syz-executor.4 (9077) used greatest stack depth: 23632 bytes left 06:22:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, &(0x7f0000001200)={@private1}, 0x20) 06:22:15 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x19, 0x0, 0x0) 06:22:15 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 19) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 19) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:22:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x4d) 06:22:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0xb) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:22:15 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 21) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x34000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:15 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 20) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:15 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 22) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:22:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x4e) 06:22:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:15 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1a, 0x0, 0x0) [ 1013.325831] FAULT_INJECTION: forcing a failure. [ 1013.325831] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.326812] CPU: 1 UID: 0 PID: 9121 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1013.326829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1013.326837] Call Trace: [ 1013.326842] [ 1013.326847] dump_stack_lvl+0xfa/0x120 [ 1013.326874] should_fail_ex+0x4d7/0x5e0 [ 1013.326897] ? __es_insert_extent+0xed2/0x1370 [ 1013.326912] should_failslab+0xc2/0x120 [ 1013.326927] kmem_cache_alloc_noprof+0x5f/0x470 [ 1013.326945] ? __pfx___es_remove_extent+0x10/0x10 [ 1013.326959] ? ext4_file_write_iter+0xe0b/0x1990 [ 1013.326974] ? iter_file_splice_write+0x927/0x10c0 [ 1013.326994] __es_insert_extent+0xed2/0x1370 [ 1013.327009] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1013.327031] ext4_es_insert_extent+0x4d0/0x1100 [ 1013.327051] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1013.327069] ? lock_acquire+0xdf/0x2e0 [ 1013.327082] ? find_held_lock+0x2b/0x80 [ 1013.327099] ? ext4_es_find_extent_range+0x1cf/0x500 [ 1013.327116] ? lock_release+0xc8/0x290 [ 1013.327132] ? do_raw_read_unlock+0x44/0xe0 [ 1013.327150] ext4_ext_map_blocks+0x1797/0x5f30 [ 1013.327166] ? __pfx_perf_tp_event+0x10/0x10 [ 1013.327183] ? lock_acquire+0xdf/0x2e0 [ 1013.327198] ? unwind_next_frame+0xb9/0x2540 [ 1013.327219] ? lock_acquire+0xdf/0x2e0 [ 1013.327231] ? unwind_next_frame+0xb9/0x2540 [ 1013.327248] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1013.327260] ? unwind_next_frame+0x3b2/0x2540 [ 1013.327280] ? look_up_lock_class+0x56/0x150 [ 1013.327297] ? unwind_next_frame+0x3bc/0x2540 [ 1013.327318] ? register_lock_class+0x41/0x560 [ 1013.327332] ? __lock_acquire+0xc65/0x1b70 [ 1013.327351] ? lock_acquire+0xdf/0x2e0 [ 1013.327362] ? ext4_map_blocks+0x4b0/0x15a0 [ 1013.327381] ext4_map_query_blocks+0x117/0x890 [ 1013.327397] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1013.327411] ? __pfx_down_read+0x10/0x10 [ 1013.327422] ? ext4_es_lookup_extent+0xc8/0xb20 [ 1013.327441] ext4_map_blocks+0x4c3/0x15a0 [ 1013.327460] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1013.327474] ? lock_is_held_type+0x9e/0x120 [ 1013.327494] ? jbd2__journal_start+0xf6/0x6b0 [ 1013.327511] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1013.327528] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1013.327545] ? ext4_iomap_begin+0x5b8/0xe80 [ 1013.327565] ext4_iomap_begin+0xa62/0xe80 [ 1013.327588] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1013.327606] ? mark_held_locks+0x49/0x80 [ 1013.327619] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1013.327636] ? __create_object+0x59/0x80 [ 1013.327651] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1013.327669] iomap_iter+0x54a/0xdb0 [ 1013.327692] __iomap_dio_rw+0x6ac/0x1cf0 [ 1013.327715] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1013.327736] ? lock_release+0xc8/0x290 [ 1013.327748] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1013.327770] ? kasan_quarantine_put+0x84/0x1e0 [ 1013.327793] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1013.327806] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1013.327832] iomap_dio_rw+0x40/0xa0 [ 1013.327849] ext4_file_write_iter+0xe0b/0x1990 [ 1013.327871] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1013.327886] ? __kasan_kmalloc+0x7f/0x90 [ 1013.327900] ? trace_kmalloc+0x1f/0xb0 [ 1013.327914] ? __kmalloc_noprof+0x22b/0x4c0 [ 1013.327929] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1013.327947] iter_file_splice_write+0x927/0x10c0 [ 1013.327971] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1013.327999] ? lock_is_held_type+0x9e/0x120 [ 1013.328016] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1013.328032] direct_splice_actor+0x192/0x7b0 [ 1013.328049] splice_direct_to_actor+0x347/0x9d0 [ 1013.328064] ? __pfx_direct_splice_actor+0x10/0x10 [ 1013.328082] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1013.328098] ? lock_acquire+0xdf/0x2e0 [ 1013.328112] do_splice_direct+0x179/0x250 [ 1013.328127] ? __pfx_do_splice_direct+0x10/0x10 [ 1013.328142] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1013.328158] ? security_file_permission+0x22/0x90 [ 1013.328175] do_sendfile+0xa8e/0xdc0 [ 1013.328206] ? __pfx_do_sendfile+0x10/0x10 [ 1013.328225] ? perf_trace_preemptirq_template+0x259/0x430 [ 1013.328246] __x64_sys_sendfile64+0x1d3/0x210 [ 1013.328259] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1013.328277] do_syscall_64+0xbf/0x360 [ 1013.328289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.328302] RIP: 0033:0x7f4188335b19 [ 1013.328312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1013.328323] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1013.328335] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1013.328343] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1013.328350] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1013.328357] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1013.328363] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1013.328380] [ 1013.364976] FAULT_INJECTION: forcing a failure. [ 1013.364976] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.367225] CPU: 0 UID: 0 PID: 9123 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1013.367258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1013.367272] Call Trace: [ 1013.367280] [ 1013.367290] dump_stack_lvl+0xfa/0x120 [ 1013.367336] should_fail_ex+0x4d7/0x5e0 [ 1013.367376] ? ext4_find_extent+0x7f5/0xa00 [ 1013.367401] should_failslab+0xc2/0x120 [ 1013.367426] __kmalloc_noprof+0xb4/0x4c0 [ 1013.367468] ext4_find_extent+0x7f5/0xa00 [ 1013.367499] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1013.367535] ? look_up_lock_class+0x56/0x150 [ 1013.367572] ? register_lock_class+0x41/0x560 [ 1013.367599] ? unwind_next_frame+0x3bc/0x2540 [ 1013.367636] ? register_lock_class+0x41/0x560 [ 1013.367669] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1013.367717] ? lock_acquire+0xdf/0x2e0 [ 1013.367741] ? ext4_map_blocks+0x569/0x15a0 [ 1013.367790] ? down_write+0x119/0x1f0 [ 1013.367812] ? __pfx_down_write+0x10/0x10 [ 1013.367835] ? lock_release+0xc8/0x290 [ 1013.367866] ext4_map_blocks+0x630/0x15a0 [ 1013.367906] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1013.367936] ? lock_is_held_type+0x9e/0x120 [ 1013.367977] ? jbd2__journal_start+0xf6/0x6b0 [ 1013.368009] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1013.368044] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1013.368079] ? ext4_iomap_begin+0x5b8/0xe80 [ 1013.368119] ext4_iomap_begin+0xa62/0xe80 [ 1013.368168] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1013.368215] ? mark_held_locks+0x49/0x80 [ 1013.368244] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1013.368278] ? __create_object+0x59/0x80 [ 1013.368310] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1013.368347] iomap_iter+0x54a/0xdb0 [ 1013.368385] __iomap_dio_rw+0x6ac/0x1cf0 [ 1013.368432] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1013.368471] ? lock_release+0xc8/0x290 [ 1013.368497] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1013.368542] ? kasan_quarantine_put+0x84/0x1e0 [ 1013.368590] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1013.368617] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1013.368663] iomap_dio_rw+0x40/0xa0 [ 1013.368700] ext4_file_write_iter+0xe0b/0x1990 [ 1013.368746] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1013.368777] ? __kasan_kmalloc+0x7f/0x90 [ 1013.368802] ? trace_kmalloc+0x1f/0xb0 [ 1013.368825] ? __kmalloc_noprof+0x22b/0x4c0 [ 1013.368857] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1013.368897] iter_file_splice_write+0x927/0x10c0 [ 1013.368946] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1013.369005] ? lock_is_held_type+0x9e/0x120 [ 1013.369040] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1013.369074] direct_splice_actor+0x192/0x7b0 [ 1013.369109] splice_direct_to_actor+0x347/0x9d0 [ 1013.369141] ? __pfx_direct_splice_actor+0x10/0x10 [ 1013.369179] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1013.369212] ? lock_acquire+0xdf/0x2e0 [ 1013.369242] do_splice_direct+0x179/0x250 [ 1013.369272] ? __pfx_do_splice_direct+0x10/0x10 [ 1013.369303] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1013.369337] ? security_file_permission+0x22/0x90 [ 1013.369370] do_sendfile+0xa8e/0xdc0 [ 1013.369412] ? __pfx_do_sendfile+0x10/0x10 [ 1013.369449] ? perf_trace_preemptirq_template+0x259/0x430 [ 1013.369495] __x64_sys_sendfile64+0x1d3/0x210 [ 1013.369521] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1013.369558] do_syscall_64+0xbf/0x360 [ 1013.369583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.369608] RIP: 0033:0x7f292e095b19 [ 1013.369628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1013.369650] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1013.369674] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1013.369690] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1013.369704] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1013.369719] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1013.369733] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1013.369766] 06:22:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x13, &(0x7f0000001200)={@private1}, 0x20) 06:22:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 20) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:22:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@dev={0xfe, 0x80, '\x00', 0x3b}, 0x400, 0x0, 0xff, 0x1}, 0x20) 06:22:15 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) [ 1013.543360] FAULT_INJECTION: forcing a failure. [ 1013.543360] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.544519] CPU: 1 UID: 0 PID: 9136 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1013.544536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1013.544544] Call Trace: [ 1013.544548] [ 1013.544553] dump_stack_lvl+0xfa/0x120 [ 1013.544581] should_fail_ex+0x4d7/0x5e0 [ 1013.544604] ? __es_insert_extent+0xed2/0x1370 [ 1013.544622] should_failslab+0xc2/0x120 [ 1013.544636] kmem_cache_alloc_noprof+0x5f/0x470 [ 1013.544654] ? __pfx___es_remove_extent+0x10/0x10 [ 1013.544668] ? ext4_file_write_iter+0xe0b/0x1990 [ 1013.544688] ? iter_file_splice_write+0x927/0x10c0 [ 1013.544710] __es_insert_extent+0xed2/0x1370 [ 1013.544726] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1013.544756] ext4_es_insert_extent+0x4d0/0x1100 [ 1013.544777] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1013.544791] ? __pfx_perf_trace_lock+0x10/0x10 [ 1013.544810] ? lock_acquire+0xdf/0x2e0 [ 1013.544824] ? find_held_lock+0x2b/0x80 [ 1013.544840] ? ext4_es_find_extent_range+0x1cf/0x500 [ 1013.544855] ? lock_release+0xc8/0x290 [ 1013.544868] ? do_raw_read_unlock+0x44/0xe0 [ 1013.544888] ext4_ext_map_blocks+0x1797/0x5f30 [ 1013.544904] ? perf_trace_lock+0xb5/0x5d0 [ 1013.544920] ? __pfx_perf_trace_lock+0x10/0x10 [ 1013.544932] ? unwind_next_frame+0xb9/0x2540 [ 1013.544953] ? lock_acquire+0xdf/0x2e0 [ 1013.544965] ? unwind_next_frame+0xb9/0x2540 [ 1013.544982] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1013.544994] ? unwind_next_frame+0x3b2/0x2540 [ 1013.545014] ? look_up_lock_class+0x56/0x150 [ 1013.545033] ? unwind_next_frame+0x3bc/0x2540 [ 1013.545050] ? register_lock_class+0x41/0x560 [ 1013.545066] ? __lock_acquire+0xc65/0x1b70 [ 1013.545086] ? lock_acquire+0xdf/0x2e0 [ 1013.545097] ? ext4_map_blocks+0x4b0/0x15a0 [ 1013.545117] ext4_map_query_blocks+0x117/0x890 [ 1013.545133] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 1013.545147] ? __pfx_down_read+0x10/0x10 [ 1013.545160] ? ext4_es_lookup_extent+0xc8/0xb20 [ 1013.545179] ext4_map_blocks+0x4c3/0x15a0 [ 1013.545199] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1013.545213] ? lock_is_held_type+0x9e/0x120 [ 1013.545234] ? jbd2__journal_start+0xf6/0x6b0 [ 1013.545251] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1013.545268] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1013.545284] ? ext4_iomap_begin+0x5b8/0xe80 [ 1013.545305] ext4_iomap_begin+0xa62/0xe80 [ 1013.545321] ? __pfx_perf_trace_lock+0x10/0x10 [ 1013.545341] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1013.545358] ? mark_held_locks+0x49/0x80 [ 1013.545373] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1013.545390] ? __create_object+0x59/0x80 [ 1013.545405] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1013.545424] iomap_iter+0x54a/0xdb0 [ 1013.545444] __iomap_dio_rw+0x6ac/0x1cf0 [ 1013.545468] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1013.545488] ? lock_release+0xc8/0x290 [ 1013.545500] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1013.545523] ? kasan_quarantine_put+0x84/0x1e0 [ 1013.545548] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1013.545562] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1013.545585] iomap_dio_rw+0x40/0xa0 [ 1013.545602] ext4_file_write_iter+0xe0b/0x1990 [ 1013.545626] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1013.545641] ? __kasan_kmalloc+0x7f/0x90 [ 1013.545654] ? trace_kmalloc+0x1f/0xb0 [ 1013.545665] ? __kmalloc_noprof+0x22b/0x4c0 [ 1013.545680] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1013.545700] iter_file_splice_write+0x927/0x10c0 [ 1013.545725] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1013.545756] ? lock_is_held_type+0x9e/0x120 [ 1013.545773] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1013.545790] direct_splice_actor+0x192/0x7b0 [ 1013.545807] splice_direct_to_actor+0x347/0x9d0 [ 1013.545823] ? __pfx_direct_splice_actor+0x10/0x10 [ 1013.545842] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1013.545859] ? lock_acquire+0xdf/0x2e0 [ 1013.545874] do_splice_direct+0x179/0x250 [ 1013.545888] ? __pfx_do_splice_direct+0x10/0x10 [ 1013.545904] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1013.545921] ? security_file_permission+0x22/0x90 [ 1013.545938] do_sendfile+0xa8e/0xdc0 [ 1013.545960] ? __pfx_do_sendfile+0x10/0x10 [ 1013.545977] ? __fget_files+0x20d/0x3b0 [ 1013.546001] __x64_sys_sendfile64+0x1d3/0x210 [ 1013.546014] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1013.546033] do_syscall_64+0xbf/0x360 [ 1013.546046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.546059] RIP: 0033:0x7f96d1de2b19 [ 1013.546069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1013.546080] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1013.546091] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1013.546100] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1013.546106] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1013.546113] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1013.546120] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1013.546139] 06:22:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x400300, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 23) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:27 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 21) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:22:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, 0x0, 0x0) 06:22:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 21) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x14, &(0x7f0000001200)={@private1}, 0x20) 06:22:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x11) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:22:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) recvmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/110, 0x6e}], 0x2, &(0x7f0000000180)=""/98, 0x62}, 0x3}, {{&(0x7f0000000200)=@ax25={{0x3, @netrom}, [@rose, @netrom, @netrom, @netrom, @bcast, @bcast, @default, @null]}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/186, 0xba}, 0x1}], 0x2, 0x21, &(0x7f0000000400)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@private0, 0x800, 0x0, 0x2, 0x11, 0x5, 0x3}, 0x20) 06:22:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x15, &(0x7f0000001200)={@private1}, 0x20) 06:22:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x0, 0xff, 0x2, 0x3}, 0x20) 06:22:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x12) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:22:27 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 22) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 1025.622096] FAULT_INJECTION: forcing a failure. [ 1025.622096] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.623987] CPU: 0 UID: 0 PID: 9190 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1025.624017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1025.624030] Call Trace: [ 1025.624037] [ 1025.624045] dump_stack_lvl+0xfa/0x120 [ 1025.624087] should_fail_ex+0x4d7/0x5e0 [ 1025.624123] ? ext4_find_extent+0x7f5/0xa00 [ 1025.624144] should_failslab+0xc2/0x120 [ 1025.624166] __kmalloc_noprof+0xb4/0x4c0 [ 1025.624193] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1025.624229] ext4_find_extent+0x7f5/0xa00 [ 1025.624257] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1025.624292] ? finish_task_switch.isra.0+0x206/0x840 [ 1025.624340] ? trace_sched_exit_tp+0xc9/0x110 [ 1025.624368] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1025.624403] ? lock_acquire+0xdf/0x2e0 [ 1025.624425] ? ext4_map_blocks+0x569/0x15a0 [ 1025.624464] ? down_write+0x119/0x1f0 [ 1025.624485] ? __pfx_down_write+0x10/0x10 [ 1025.624505] ? lock_release+0xc8/0x290 [ 1025.624532] ext4_map_blocks+0x630/0x15a0 [ 1025.624568] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1025.624594] ? lock_is_held_type+0x9e/0x120 [ 1025.624631] ? jbd2__journal_start+0xf6/0x6b0 [ 1025.624659] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1025.624697] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1025.624727] ? ext4_iomap_begin+0x5b8/0xe80 [ 1025.624763] ext4_iomap_begin+0xa62/0xe80 [ 1025.624806] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1025.624837] ? mark_held_locks+0x49/0x80 [ 1025.624862] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1025.624892] ? __create_object+0x59/0x80 [ 1025.624918] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1025.624951] iomap_iter+0x54a/0xdb0 [ 1025.624985] __iomap_dio_rw+0x6ac/0x1cf0 [ 1025.625026] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1025.625060] ? lock_release+0xc8/0x290 [ 1025.625083] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1025.625123] ? kasan_quarantine_put+0x84/0x1e0 [ 1025.625165] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1025.625189] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1025.625229] iomap_dio_rw+0x40/0xa0 [ 1025.625261] ext4_file_write_iter+0xe0b/0x1990 [ 1025.625302] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1025.625329] ? __kasan_kmalloc+0x7f/0x90 [ 1025.625351] ? trace_kmalloc+0x1f/0xb0 [ 1025.625371] ? __kmalloc_noprof+0x22b/0x4c0 [ 1025.625400] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1025.625435] iter_file_splice_write+0x927/0x10c0 [ 1025.625479] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1025.625531] ? lock_is_held_type+0x9e/0x120 [ 1025.625562] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1025.625592] direct_splice_actor+0x192/0x7b0 [ 1025.625623] splice_direct_to_actor+0x347/0x9d0 [ 1025.625652] ? __pfx_direct_splice_actor+0x10/0x10 [ 1025.625685] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1025.625715] ? lock_acquire+0xdf/0x2e0 [ 1025.625741] do_splice_direct+0x179/0x250 [ 1025.625768] ? __pfx_do_splice_direct+0x10/0x10 [ 1025.625795] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1025.625825] ? security_file_permission+0x22/0x90 [ 1025.625854] do_sendfile+0xa8e/0xdc0 [ 1025.625891] ? __pfx_do_sendfile+0x10/0x10 [ 1025.625924] ? perf_trace_preemptirq_template+0x259/0x430 [ 1025.625964] __x64_sys_sendfile64+0x1d3/0x210 [ 1025.625987] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1025.626020] do_syscall_64+0xbf/0x360 [ 1025.626042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.626065] RIP: 0033:0x7f96d1de2b19 [ 1025.626082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1025.626102] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1025.626124] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1025.626139] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1025.626151] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1025.626164] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1025.626177] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1025.626207] 06:22:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:37 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 23) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:22:37 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xaa, 0x14000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:22:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 22) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, 0x0, 0x0) 06:22:37 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 24) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x16, &(0x7f0000001200)={@private1}, 0x20) 06:22:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x13) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 1035.539492] FAULT_INJECTION: forcing a failure. [ 1035.539492] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.541202] CPU: 1 UID: 0 PID: 9211 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1035.541232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1035.541244] Call Trace: [ 1035.541251] [ 1035.541260] dump_stack_lvl+0xfa/0x120 [ 1035.541300] should_fail_ex+0x4d7/0x5e0 [ 1035.541336] ? ext4_find_extent+0x7f5/0xa00 [ 1035.541356] should_failslab+0xc2/0x120 [ 1035.541378] __kmalloc_noprof+0xb4/0x4c0 [ 1035.541415] ext4_find_extent+0x7f5/0xa00 [ 1035.541442] ext4_ext_map_blocks+0x1cc/0x5f30 [ 1035.541475] ? finish_task_switch.isra.0+0x206/0x840 [ 1035.541511] ? trace_sched_exit_tp+0xc9/0x110 [ 1035.541541] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1035.541576] ? lock_acquire+0xdf/0x2e0 [ 1035.541598] ? ext4_map_blocks+0x569/0x15a0 [ 1035.541637] ? down_write+0x119/0x1f0 [ 1035.541657] ? __pfx_down_write+0x10/0x10 [ 1035.541677] ? lock_release+0xc8/0x290 [ 1035.541712] ext4_map_blocks+0x630/0x15a0 [ 1035.541747] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1035.541773] ? lock_is_held_type+0x9e/0x120 [ 1035.541810] ? jbd2__journal_start+0xf6/0x6b0 [ 1035.541838] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1035.541868] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1035.541898] ? ext4_iomap_begin+0x5b8/0xe80 [ 1035.541934] ext4_iomap_begin+0xa62/0xe80 [ 1035.541977] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1035.542008] ? mark_held_locks+0x49/0x80 [ 1035.542034] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1035.542063] ? __create_object+0x59/0x80 [ 1035.542089] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1035.542122] iomap_iter+0x54a/0xdb0 [ 1035.542155] __iomap_dio_rw+0x6ac/0x1cf0 [ 1035.542197] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1035.542231] ? lock_release+0xc8/0x290 [ 1035.542253] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1035.542294] ? kasan_quarantine_put+0x84/0x1e0 [ 1035.542336] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1035.542360] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1035.542400] iomap_dio_rw+0x40/0xa0 [ 1035.542432] ext4_file_write_iter+0xe0b/0x1990 [ 1035.542472] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1035.542500] ? __kasan_kmalloc+0x7f/0x90 [ 1035.542522] ? trace_kmalloc+0x1f/0xb0 [ 1035.542543] ? __kmalloc_noprof+0x22b/0x4c0 [ 1035.542571] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1035.542606] iter_file_splice_write+0x927/0x10c0 [ 1035.542649] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1035.542702] ? lock_is_held_type+0x9e/0x120 [ 1035.542733] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1035.542763] direct_splice_actor+0x192/0x7b0 [ 1035.542794] splice_direct_to_actor+0x347/0x9d0 [ 1035.542823] ? __pfx_direct_splice_actor+0x10/0x10 [ 1035.542856] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1035.542886] ? lock_acquire+0xdf/0x2e0 [ 1035.542912] do_splice_direct+0x179/0x250 [ 1035.542939] ? __pfx_do_splice_direct+0x10/0x10 [ 1035.542967] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1035.542998] ? security_file_permission+0x22/0x90 [ 1035.543026] do_sendfile+0xa8e/0xdc0 [ 1035.543064] ? __pfx_do_sendfile+0x10/0x10 [ 1035.543097] ? perf_trace_preemptirq_template+0x259/0x430 [ 1035.543137] __x64_sys_sendfile64+0x1d3/0x210 [ 1035.543160] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1035.543193] do_syscall_64+0xbf/0x360 [ 1035.543216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.543239] RIP: 0033:0x7f4188335b19 [ 1035.543256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.543277] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1035.543299] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1035.543314] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1035.543326] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.543340] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.543353] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1035.543383] [ 1035.593975] FAULT_INJECTION: forcing a failure. [ 1035.593975] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.597664] CPU: 0 UID: 0 PID: 9217 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1035.597702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1035.597715] Call Trace: [ 1035.597722] [ 1035.597731] dump_stack_lvl+0xfa/0x120 06:22:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, &(0x7f0000001200)={@private1}, 0x20) 06:22:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x14) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 1035.597773] should_fail_ex+0x4d7/0x5e0 [ 1035.597809] ? ext4_mb_new_blocks+0x64e/0x4570 [ 1035.597840] should_failslab+0xc2/0x120 [ 1035.597862] kmem_cache_alloc_noprof+0x5f/0x470 [ 1035.597893] ? _raw_spin_unlock+0x1e/0x40 [ 1035.597922] ? __mark_inode_dirty+0x646/0xd00 [ 1035.597948] ext4_mb_new_blocks+0x64e/0x4570 [ 1035.597988] ? kasan_save_track+0x14/0x30 [ 1035.598010] ? __kasan_kmalloc+0x7f/0x90 [ 1035.598032] ? trace_kmalloc+0x1f/0xb0 [ 1035.598052] ? __kmalloc_noprof+0x22b/0x4c0 [ 1035.598082] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1035.598113] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1035.598147] ? ext4_inode_to_goal_block+0x323/0x430 [ 1035.598184] ext4_ext_map_blocks+0x1c55/0x5f30 [ 1035.598219] ? look_up_lock_class+0x56/0x150 [ 1035.598248] ? unwind_next_frame+0x3bc/0x2540 [ 1035.598281] ? register_lock_class+0x41/0x560 [ 1035.598312] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1035.598347] ? lock_acquire+0xdf/0x2e0 [ 1035.598368] ? ext4_map_blocks+0x569/0x15a0 [ 1035.598409] ? __pfx_down_write+0x10/0x10 [ 1035.598429] ? lock_release+0xc8/0x290 [ 1035.598456] ext4_map_blocks+0x630/0x15a0 [ 1035.598492] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1035.598517] ? lock_is_held_type+0x9e/0x120 [ 1035.598553] ? jbd2__journal_start+0xf6/0x6b0 [ 1035.598581] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1035.598611] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1035.598641] ? ext4_iomap_begin+0x5b8/0xe80 [ 1035.598676] ext4_iomap_begin+0xa62/0xe80 [ 1035.598719] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1035.598751] ? mark_held_locks+0x49/0x80 [ 1035.598776] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1035.598804] ? __create_object+0x59/0x80 [ 1035.598831] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1035.598863] iomap_iter+0x54a/0xdb0 [ 1035.598896] __iomap_dio_rw+0x6ac/0x1cf0 [ 1035.598937] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1035.598971] ? lock_release+0xc8/0x290 [ 1035.598993] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1035.599033] ? kasan_quarantine_put+0x84/0x1e0 [ 1035.599075] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1035.599099] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1035.599138] iomap_dio_rw+0x40/0xa0 [ 1035.599170] ext4_file_write_iter+0xe0b/0x1990 [ 1035.599210] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1035.599238] ? __kasan_kmalloc+0x7f/0x90 [ 1035.599259] ? trace_kmalloc+0x1f/0xb0 [ 1035.599279] ? __kmalloc_noprof+0x22b/0x4c0 [ 1035.599307] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1035.599341] iter_file_splice_write+0x927/0x10c0 [ 1035.599384] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1035.599436] ? lock_is_held_type+0x9e/0x120 [ 1035.599466] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1035.599496] direct_splice_actor+0x192/0x7b0 [ 1035.599526] splice_direct_to_actor+0x347/0x9d0 [ 1035.599555] ? __pfx_direct_splice_actor+0x10/0x10 [ 1035.599588] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1035.599617] ? lock_acquire+0xdf/0x2e0 [ 1035.599643] do_splice_direct+0x179/0x250 [ 1035.599669] ? __pfx_do_splice_direct+0x10/0x10 [ 1035.599696] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1035.599726] ? security_file_permission+0x22/0x90 [ 1035.599755] do_sendfile+0xa8e/0xdc0 [ 1035.599791] ? __pfx_do_sendfile+0x10/0x10 [ 1035.599824] ? perf_trace_preemptirq_template+0x259/0x430 [ 1035.599863] __x64_sys_sendfile64+0x1d3/0x210 [ 1035.599886] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1035.599918] do_syscall_64+0xbf/0x360 [ 1035.599941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.599963] RIP: 0033:0x7f292e095b19 [ 1035.599980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.600001] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1035.600023] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1035.600037] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1035.600050] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.600063] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.600076] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1035.600106] 06:22:37 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x0, 0x1, 0x1, 0x7ff}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x29, 0x1, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xe0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @local, 0x4, 0x1, 0x6, 0x400, 0x6, 0x2400080}) 06:22:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, 0x0, 0x0) 06:22:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 23) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:37 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 24) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:22:37 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 25) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 1035.935639] FAULT_INJECTION: forcing a failure. [ 1035.935639] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.937330] CPU: 1 UID: 0 PID: 9240 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1035.937360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1035.937373] Call Trace: [ 1035.937381] [ 1035.937389] dump_stack_lvl+0xfa/0x120 [ 1035.937429] should_fail_ex+0x4d7/0x5e0 [ 1035.937465] ? ext4_mb_new_blocks+0x64e/0x4570 [ 1035.937495] should_failslab+0xc2/0x120 [ 1035.937517] kmem_cache_alloc_noprof+0x5f/0x470 [ 1035.937548] ? _raw_spin_unlock+0x1e/0x40 [ 1035.937575] ? __mark_inode_dirty+0x646/0xd00 [ 1035.937602] ext4_mb_new_blocks+0x64e/0x4570 [ 1035.937643] ? kasan_save_track+0x14/0x30 [ 1035.937664] ? __kasan_kmalloc+0x7f/0x90 [ 1035.937693] ? trace_kmalloc+0x1f/0xb0 [ 1035.937714] ? __kmalloc_noprof+0x22b/0x4c0 [ 1035.937745] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1035.937776] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1035.937810] ? ext4_inode_to_goal_block+0x323/0x430 [ 1035.937848] ext4_ext_map_blocks+0x1c55/0x5f30 [ 1035.937879] ? look_up_lock_class+0x56/0x150 [ 1035.937913] ? register_lock_class+0x41/0x560 [ 1035.937936] ? unwind_next_frame+0x3bc/0x2540 [ 1035.937969] ? register_lock_class+0x41/0x560 [ 1035.937998] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1035.938034] ? lock_acquire+0xdf/0x2e0 [ 1035.938055] ? ext4_map_blocks+0x569/0x15a0 [ 1035.938096] ? __pfx_down_write+0x10/0x10 [ 1035.938117] ? lock_release+0xc8/0x290 [ 1035.938145] ext4_map_blocks+0x630/0x15a0 [ 1035.938180] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1035.938207] ? lock_is_held_type+0x9e/0x120 [ 1035.938243] ? jbd2__journal_start+0xf6/0x6b0 [ 1035.938272] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1035.938302] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1035.938333] ? ext4_iomap_begin+0x5b8/0xe80 [ 1035.938369] ext4_iomap_begin+0xa62/0xe80 [ 1035.938412] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1035.938444] ? mark_held_locks+0x49/0x80 [ 1035.938469] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1035.938499] ? __create_object+0x59/0x80 [ 1035.938525] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1035.938558] iomap_iter+0x54a/0xdb0 [ 1035.938591] __iomap_dio_rw+0x6ac/0x1cf0 [ 1035.938633] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1035.938668] ? lock_release+0xc8/0x290 [ 1035.938691] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1035.938731] ? kasan_quarantine_put+0x84/0x1e0 [ 1035.938773] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1035.938798] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1035.938838] iomap_dio_rw+0x40/0xa0 [ 1035.938870] ext4_file_write_iter+0xe0b/0x1990 [ 1035.938910] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1035.938938] ? __kasan_kmalloc+0x7f/0x90 [ 1035.938961] ? trace_kmalloc+0x1f/0xb0 [ 1035.938984] ? __kmalloc_noprof+0x22b/0x4c0 [ 1035.939012] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1035.939047] iter_file_splice_write+0x927/0x10c0 [ 1035.939090] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1035.939143] ? lock_is_held_type+0x9e/0x120 [ 1035.939174] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1035.939204] direct_splice_actor+0x192/0x7b0 [ 1035.939235] splice_direct_to_actor+0x347/0x9d0 [ 1035.939264] ? __pfx_direct_splice_actor+0x10/0x10 [ 1035.939297] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1035.939327] ? lock_acquire+0xdf/0x2e0 [ 1035.939360] do_splice_direct+0x179/0x250 [ 1035.939387] ? __pfx_do_splice_direct+0x10/0x10 [ 1035.939414] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1035.939444] ? security_file_permission+0x22/0x90 [ 1035.939473] do_sendfile+0xa8e/0xdc0 [ 1035.939511] ? __pfx_do_sendfile+0x10/0x10 [ 1035.939541] ? __fget_files+0x20d/0x3b0 [ 1035.939582] __x64_sys_sendfile64+0x1d3/0x210 [ 1035.939605] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1035.939638] do_syscall_64+0xbf/0x360 [ 1035.939660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.939683] RIP: 0033:0x7f96d1de2b19 [ 1035.939700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.939721] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1035.939742] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1035.939757] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1035.939770] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.939784] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.939797] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1035.939827] 06:22:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 24) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:47 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 25) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:22:47 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x15) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:22:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, &(0x7f0000001200)={@private1}, 0x20) 06:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x21, 0x0, 0x0) 06:22:47 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 26) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:47 executing program 0: sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4040084) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16b}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdf}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @hci={0x1f, 0x0, 0x4}, @l2={0x1f, 0x6, @none, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x9c82, &(0x7f0000000000)='wg0\x00', 0x1, 0x3, 0x1}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000380)={@loopback, 0x5a}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) getsockopt$inet6_int(r1, 0x29, 0xabbf5b17d9a477b1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 06:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 1045.121445] FAULT_INJECTION: forcing a failure. [ 1045.121445] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.123396] CPU: 0 UID: 0 PID: 9270 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1045.123428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1045.123442] Call Trace: [ 1045.123449] [ 1045.123459] dump_stack_lvl+0xfa/0x120 [ 1045.123503] should_fail_ex+0x4d7/0x5e0 [ 1045.123542] ? __es_insert_extent+0xed2/0x1370 [ 1045.123572] should_failslab+0xc2/0x120 [ 1045.123596] kmem_cache_alloc_noprof+0x5f/0x470 [ 1045.123630] ? __pfx___es_remove_extent+0x10/0x10 [ 1045.123657] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 1045.123698] __es_insert_extent+0xed2/0x1370 [ 1045.123740] ext4_es_insert_extent+0x4d0/0x1100 [ 1045.123779] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1045.123809] ? lock_acquire+0xdf/0x2e0 [ 1045.123835] ? ext4_map_blocks+0x569/0x15a0 [ 1045.123883] ? __pfx_down_write+0x10/0x10 [ 1045.123906] ? lock_release+0xc8/0x290 [ 1045.123936] ext4_map_blocks+0x815/0x15a0 [ 1045.123975] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1045.124003] ? lock_is_held_type+0x9e/0x120 [ 1045.124043] ? jbd2__journal_start+0xf6/0x6b0 [ 1045.124073] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1045.124107] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1045.124140] ? ext4_iomap_begin+0x5b8/0xe80 [ 1045.124178] ext4_iomap_begin+0xa62/0xe80 [ 1045.124225] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1045.124259] ? mark_held_locks+0x49/0x80 [ 1045.124286] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1045.124318] ? __create_object+0x59/0x80 [ 1045.124347] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1045.124382] iomap_iter+0x54a/0xdb0 [ 1045.124419] __iomap_dio_rw+0x6ac/0x1cf0 [ 1045.124464] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1045.124501] ? lock_release+0xc8/0x290 [ 1045.124541] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1045.124603] ? kasan_quarantine_put+0x84/0x1e0 [ 1045.124658] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1045.124685] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1045.124729] iomap_dio_rw+0x40/0xa0 [ 1045.124764] ext4_file_write_iter+0xe0b/0x1990 [ 1045.124807] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1045.124837] ? __kasan_kmalloc+0x7f/0x90 [ 1045.124861] ? trace_kmalloc+0x1f/0xb0 [ 1045.124883] ? __kmalloc_noprof+0x22b/0x4c0 [ 1045.124914] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1045.124952] iter_file_splice_write+0x927/0x10c0 [ 1045.124999] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1045.125056] ? lock_is_held_type+0x9e/0x120 [ 1045.125089] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1045.125122] direct_splice_actor+0x192/0x7b0 [ 1045.125155] splice_direct_to_actor+0x347/0x9d0 [ 1045.125186] ? __pfx_direct_splice_actor+0x10/0x10 [ 1045.125222] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1045.125254] ? lock_acquire+0xdf/0x2e0 [ 1045.125283] do_splice_direct+0x179/0x250 [ 1045.125312] ? __pfx_do_splice_direct+0x10/0x10 [ 1045.125342] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1045.125374] ? security_file_permission+0x22/0x90 [ 1045.125405] do_sendfile+0xa8e/0xdc0 [ 1045.125445] ? __pfx_do_sendfile+0x10/0x10 [ 1045.125482] ? perf_trace_preemptirq_template+0x259/0x430 [ 1045.125524] __x64_sys_sendfile64+0x1d3/0x210 [ 1045.125549] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1045.125585] do_syscall_64+0xbf/0x360 [ 1045.125609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.125633] RIP: 0033:0x7f292e095b19 [ 1045.125651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1045.125674] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1045.125697] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1045.125713] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1045.125726] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1045.125741] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1045.125755] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1045.125788] 06:22:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, 0x0, 0x0) 06:22:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:47 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x10009, 0x0, 0xff, 0x5, 0x80, 0x4}, 0x20) 06:22:47 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x16) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 1045.232273] FAULT_INJECTION: forcing a failure. [ 1045.232273] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.234363] CPU: 0 UID: 0 PID: 9271 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1045.234396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1045.234410] Call Trace: [ 1045.234417] [ 1045.234426] dump_stack_lvl+0xfa/0x120 [ 1045.234472] should_fail_ex+0x4d7/0x5e0 [ 1045.234511] ? ext4_mb_new_blocks+0x64e/0x4570 [ 1045.234542] should_failslab+0xc2/0x120 [ 1045.234566] kmem_cache_alloc_noprof+0x5f/0x470 [ 1045.234600] ? _raw_spin_unlock+0x1e/0x40 [ 1045.234629] ? __mark_inode_dirty+0x646/0xd00 [ 1045.234658] ext4_mb_new_blocks+0x64e/0x4570 [ 1045.234710] ? kasan_save_track+0x14/0x30 [ 1045.234733] ? __kasan_kmalloc+0x7f/0x90 [ 1045.234757] ? trace_kmalloc+0x1f/0xb0 [ 1045.234779] ? __kmalloc_noprof+0x22b/0x4c0 [ 1045.234808] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1045.234840] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 1045.234874] ? ext4_ext_search_right+0x2e8/0xbd0 [ 1045.234910] ? ext4_inode_to_goal_block+0x323/0x430 [ 1045.234951] ext4_ext_map_blocks+0x1c55/0x5f30 06:22:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x19, &(0x7f0000001200)={@private1}, 0x20) [ 1045.234988] ? finish_task_switch.isra.0+0x294/0x840 [ 1045.235028] ? trace_sched_exit_tp+0xc9/0x110 [ 1045.235058] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1045.235096] ? lock_acquire+0xdf/0x2e0 [ 1045.235120] ? ext4_map_blocks+0x569/0x15a0 [ 1045.235165] ? __pfx_down_write+0x10/0x10 [ 1045.235186] ? lock_release+0xc8/0x290 [ 1045.235216] ext4_map_blocks+0x630/0x15a0 [ 1045.235255] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1045.235283] ? lock_is_held_type+0x9e/0x120 [ 1045.235323] ? jbd2__journal_start+0xf6/0x6b0 [ 1045.235353] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1045.235386] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1045.235418] ? ext4_iomap_begin+0x5b8/0xe80 [ 1045.235457] ext4_iomap_begin+0xa62/0xe80 [ 1045.235503] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1045.235537] ? mark_held_locks+0x49/0x80 [ 1045.235565] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1045.235596] ? __create_object+0x59/0x80 [ 1045.235624] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1045.235660] iomap_iter+0x54a/0xdb0 [ 1045.235696] __iomap_dio_rw+0x6ac/0x1cf0 [ 1045.235740] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1045.235778] ? lock_release+0xc8/0x290 [ 1045.235802] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1045.235845] ? kasan_quarantine_put+0x84/0x1e0 [ 1045.235891] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1045.235917] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1045.235960] iomap_dio_rw+0x40/0xa0 [ 1045.235994] ext4_file_write_iter+0xe0b/0x1990 [ 1045.236038] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1045.236068] ? __kasan_kmalloc+0x7f/0x90 [ 1045.236092] ? trace_kmalloc+0x1f/0xb0 [ 1045.236113] ? __kmalloc_noprof+0x22b/0x4c0 [ 1045.236144] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1045.236181] iter_file_splice_write+0x927/0x10c0 [ 1045.236228] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1045.236284] ? lock_is_held_type+0x9e/0x120 [ 1045.236317] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1045.236350] direct_splice_actor+0x192/0x7b0 [ 1045.236383] splice_direct_to_actor+0x347/0x9d0 [ 1045.236414] ? __pfx_direct_splice_actor+0x10/0x10 [ 1045.236450] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1045.236483] ? lock_acquire+0xdf/0x2e0 [ 1045.236511] do_splice_direct+0x179/0x250 [ 1045.236568] ? __pfx_do_splice_direct+0x10/0x10 [ 1045.236610] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1045.236655] ? security_file_permission+0x22/0x90 [ 1045.236692] do_sendfile+0xa8e/0xdc0 [ 1045.236732] ? __pfx_do_sendfile+0x10/0x10 [ 1045.236768] ? perf_trace_preemptirq_template+0x259/0x430 [ 1045.236811] __x64_sys_sendfile64+0x1d3/0x210 [ 1045.236836] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1045.236871] do_syscall_64+0xbf/0x360 [ 1045.236896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.236920] RIP: 0033:0x7f4188335b19 [ 1045.236939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1045.236962] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1045.236986] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1045.237002] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1045.237016] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1045.237030] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1045.237045] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1045.237077] [ 1045.361556] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1045.368500] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 06:22:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x17) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:22:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, 0x0, 0x0) 06:22:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@empty, 0x6, 0x2, 0x3, 0x8, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x10000, 0x1, 0x2, 0x1}, 0xffffffffffffffa1) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="b7cb63fb88943140c8aa8aeb99f6766996144d096d57b6f3b878dd610bf184f95069b79b2ddedde0bc18387639ff6db445c7f8cdaf037d9ec38f2adc386c2b5f8de2145c029bc576a92ee59188dc29be625fbba6bcecc5a0faa31f54038408ba7a2147", 0x63}, {&(0x7f00000000c0)="57a2163499a45a48bd11fc2515608bb541bbff135139fe3b844c08300e25df574c7557d6942d31c50d93017cd18bf84cbbecced15e133c07d35e3fd91e039699c31553d073a8d2541420c18b5bfea2c18fb5d9be8ad6c6084f1a4e88beed0ab4f27089e5f91ce9952c91bf77a186128a2e5c7aee7c9995868d7af895d8bf0301f7cc58a780431b031bf9500262a6fc89cfc7053eed71973b0d8453f99ac717f15666a86901d0db813504ff47399a52f817d372280a74b9c3334cf9a0", 0xbc}, {&(0x7f0000000180)="7b8dcda2cb0af561352eee5ab19c784cc52bdc55e6070eb47975d43b264bc980ab9f83f13dcc6b9e308effa81195f495054effc0", 0x34}, {&(0x7f00000001c0)="ec16d5d96ead6796f58a4e5b489591949f431a4ff66296bd4c3a375c787a3cbc2b51127faca1deb757c5428b43c2dc3dc43c5cf3a34bff0055", 0x39}, {&(0x7f0000000200)="afe31482ea4046b73b62255e1ee4ce4a5cb275f1a4957da59350d4364f87b8b0f9b3531417fd2772376a6a028a5d08b5a6306421909b03b877e06bb79cfaf8b79350f38a7b0af8f992fce6a3ec10781e5cc6fd84011cb6c829c04b370a95d2", 0x5f}, {&(0x7f0000000280)="084299cd24b3d7c80f8dd922b6ad290c7bf401dd6098b1f79c1497eaead6be0a008349db3c5e2021813e086888690b5343d53081fa81b5185958e0f3a380ef027e6e1be571e986cb36dff7f1bdd2bcc96023f5e1e39cc19327100778cac58b0446d054c99446ca0c0c1d88c64617a94a9a7c2f627f6cedbbb7d4eeab7d07d325f79d86243d6bb8aefdc39c2a1bf474b0f075bc99055747a56e8dbad56406", 0x9e}, {&(0x7f0000000340)="15a9f09bead5b7a7019b1be7708e94749d5f14fea817f708e24ae485c9ee7b067976ac50f8c7da6689f3a72acee59357ae5dd40f23984dcbf5b7cc1808c8f76a635d15e80be986054b0ee970508e277e244f899df9756488deefa7fc47efbad93a8cd47af6a147c3e1d1cdaa26d79346da96adeee53e32c6b14f69d7906bb3e241fc50f8af216fe5a7c9895b74bbb826e918766dfbd6c1a794c836c4035787", 0x9f}, {&(0x7f0000000400)="bdfbf3178ed75c5ad7bffb277045997236dfc2ebe9713369c6b9c310a93bf85f036637955b5a3e015ede722f8cd522528acd938d04a75f159f99b83fb3be543f62ae790ce074eb4f7b7820d3de1b58d3b512981d55274a89c80671db", 0x5c}], 0x8}, 0x40000) 06:22:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1a, &(0x7f0000001200)={@private1}, 0x20) 06:22:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 26) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:22:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 25) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:57 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 27) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 1055.352374] FAULT_INJECTION: forcing a failure. [ 1055.352374] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.354503] CPU: 1 UID: 0 PID: 9312 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1055.354536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1055.354550] Call Trace: [ 1055.354559] [ 1055.354567] dump_stack_lvl+0xfa/0x120 [ 1055.354610] should_fail_ex+0x4d7/0x5e0 [ 1055.354649] ? __es_insert_extent+0xed2/0x1370 [ 1055.354676] should_failslab+0xc2/0x120 [ 1055.354708] kmem_cache_alloc_noprof+0x5f/0x470 [ 1055.354741] ? __pfx___es_remove_extent+0x10/0x10 [ 1055.354767] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 1055.354801] __es_insert_extent+0xed2/0x1370 [ 1055.354843] ext4_es_insert_extent+0x4d0/0x1100 [ 1055.354882] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1055.354911] ? lock_acquire+0xdf/0x2e0 [ 1055.354935] ? ext4_map_blocks+0x569/0x15a0 [ 1055.354981] ? __pfx_down_write+0x10/0x10 [ 1055.355004] ? lock_release+0xc8/0x290 [ 1055.355034] ext4_map_blocks+0x815/0x15a0 [ 1055.355072] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1055.355101] ? lock_is_held_type+0x9e/0x120 [ 1055.355140] ? jbd2__journal_start+0xf6/0x6b0 [ 1055.355171] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1055.355204] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1055.355237] ? ext4_iomap_begin+0x5b8/0xe80 [ 1055.355275] ext4_iomap_begin+0xa62/0xe80 [ 1055.355322] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1055.355356] ? mark_held_locks+0x49/0x80 [ 1055.355384] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1055.355415] ? __create_object+0x59/0x80 [ 1055.355443] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1055.355479] iomap_iter+0x54a/0xdb0 [ 1055.355515] __iomap_dio_rw+0x6ac/0x1cf0 [ 1055.355560] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1055.355598] ? lock_release+0xc8/0x290 [ 1055.355622] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1055.355665] ? kasan_quarantine_put+0x84/0x1e0 [ 1055.355711] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1055.355738] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1055.355781] iomap_dio_rw+0x40/0xa0 [ 1055.355816] ext4_file_write_iter+0xe0b/0x1990 [ 1055.355860] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1055.355890] ? __kasan_kmalloc+0x7f/0x90 [ 1055.355914] ? trace_kmalloc+0x1f/0xb0 [ 1055.355936] ? __kmalloc_noprof+0x22b/0x4c0 [ 1055.355966] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1055.356005] iter_file_splice_write+0x927/0x10c0 [ 1055.356052] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1055.356109] ? lock_is_held_type+0x9e/0x120 [ 1055.356142] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1055.356175] direct_splice_actor+0x192/0x7b0 [ 1055.356209] splice_direct_to_actor+0x347/0x9d0 [ 1055.356239] ? __pfx_direct_splice_actor+0x10/0x10 [ 1055.356276] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1055.356308] ? lock_acquire+0xdf/0x2e0 [ 1055.356337] do_splice_direct+0x179/0x250 [ 1055.356365] ? __pfx_do_splice_direct+0x10/0x10 [ 1055.356395] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1055.356428] ? security_file_permission+0x22/0x90 [ 1055.356459] do_sendfile+0xa8e/0xdc0 [ 1055.356499] ? __pfx_do_sendfile+0x10/0x10 [ 1055.356532] ? __fget_files+0x20d/0x3b0 [ 1055.356576] __x64_sys_sendfile64+0x1d3/0x210 [ 1055.356601] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1055.356654] do_syscall_64+0xbf/0x360 [ 1055.356678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.356702] RIP: 0033:0x7f96d1de2b19 [ 1055.356720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1055.356743] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1055.356765] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1055.356781] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1055.356795] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1055.356810] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1055.356824] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1055.356856] 06:22:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000010000001800000069897ea4d92ba85dd8bd202550a835510f581e7dc0cfd573ddff086f8f8c2782a2c240eec5ae42a2f3116f00f8bc6594a4415521c9550ceef5138524b362", @ANYRES32=r0, @ANYBLOB="00010000000000002e2f66696c653000"]) sendfile(r0, r1, &(0x7f0000000040)=0x1, 0x413d) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@local, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:22:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:22:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000001200)={@private1}, 0x20) 06:22:57 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 28) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x18) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:22:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 26) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:22:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x24, 0x0, 0x0) 06:22:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x2, 0x9e, "09a50b8389efd639e46492663954dff3fc6822514d373e449e996353341e3b469ac33b3b9fb486d3cd2fd5a4a37667031fe35a89b72f07d97eba50088835024c00c3f1baecfdc233a1db290c537ca9eaa014f3561e97cafafdb4f5582035dde01f775239970c1b06c79b613304bff81f0172cb6abade1f3aa4de42fde92276a346d6b4a73f097d643e58d0647e0d8b4887e0d400df232a210240e8ad0071"}) [ 1055.698239] FAULT_INJECTION: forcing a failure. [ 1055.698239] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.699956] CPU: 0 UID: 0 PID: 9336 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1055.699986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1055.699999] Call Trace: [ 1055.700007] [ 1055.700015] dump_stack_lvl+0xfa/0x120 [ 1055.700057] should_fail_ex+0x4d7/0x5e0 [ 1055.700094] ? __es_insert_extent+0xed2/0x1370 [ 1055.700118] should_failslab+0xc2/0x120 [ 1055.700141] kmem_cache_alloc_noprof+0x5f/0x470 [ 1055.700172] ? __pfx___es_remove_extent+0x10/0x10 [ 1055.700197] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 1055.700233] __es_insert_extent+0xed2/0x1370 [ 1055.700272] ext4_es_insert_extent+0x4d0/0x1100 [ 1055.700308] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 1055.700335] ? lock_acquire+0xdf/0x2e0 [ 1055.700358] ? ext4_map_blocks+0x569/0x15a0 [ 1055.700399] ? __pfx_down_write+0x10/0x10 [ 1055.700421] ? lock_release+0xc8/0x290 [ 1055.700450] ext4_map_blocks+0x815/0x15a0 [ 1055.700486] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1055.700512] ? lock_is_held_type+0x9e/0x120 [ 1055.700549] ? jbd2__journal_start+0xf6/0x6b0 [ 1055.700578] ? __ext4_journal_start_sb+0x325/0x5d0 [ 1055.700609] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 1055.700652] ? ext4_iomap_begin+0x5b8/0xe80 [ 1055.700693] ext4_iomap_begin+0xa62/0xe80 [ 1055.700737] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1055.700770] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1055.700804] ? __create_object+0x59/0x80 [ 1055.700831] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 1055.700864] iomap_iter+0x54a/0xdb0 [ 1055.700897] __iomap_dio_rw+0x6ac/0x1cf0 [ 1055.700940] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1055.700974] ? lock_release+0xc8/0x290 [ 1055.700997] ? __pfx___iomap_dio_rw+0x10/0x10 [ 1055.701038] ? kasan_quarantine_put+0x84/0x1e0 [ 1055.701081] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 1055.701105] ? __pfx_ext4_orphan_add+0x10/0x10 [ 1055.701146] iomap_dio_rw+0x40/0xa0 [ 1055.701178] ext4_file_write_iter+0xe0b/0x1990 [ 1055.701222] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1055.701251] ? __kasan_kmalloc+0x7f/0x90 [ 1055.701274] ? trace_kmalloc+0x1f/0xb0 [ 1055.701294] ? __kmalloc_noprof+0x22b/0x4c0 [ 1055.701322] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1055.701358] iter_file_splice_write+0x927/0x10c0 [ 1055.701401] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1055.701455] ? lock_is_held_type+0x9e/0x120 [ 1055.701486] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1055.701516] direct_splice_actor+0x192/0x7b0 [ 1055.701547] splice_direct_to_actor+0x347/0x9d0 [ 1055.701577] ? __pfx_direct_splice_actor+0x10/0x10 [ 1055.701610] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1055.701640] ? lock_acquire+0xdf/0x2e0 [ 1055.701667] do_splice_direct+0x179/0x250 [ 1055.701694] ? __pfx_do_splice_direct+0x10/0x10 [ 1055.701721] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1055.701752] ? security_file_permission+0x22/0x90 [ 1055.701781] do_sendfile+0xa8e/0xdc0 [ 1055.701819] ? __pfx_do_sendfile+0x10/0x10 [ 1055.701852] ? perf_trace_preemptirq_template+0x259/0x430 [ 1055.701892] __x64_sys_sendfile64+0x1d3/0x210 [ 1055.701916] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1055.701949] do_syscall_64+0xbf/0x360 [ 1055.701972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.701994] RIP: 0033:0x7f4188335b19 [ 1055.702012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1055.702034] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1055.702055] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1055.702070] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1055.702083] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1055.702096] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1055.702110] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1055.702140] 06:23:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 27) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000006e80)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000080)}, 0x8}, {{&(0x7f00000000c0)=@pppol2tp, 0x80, &(0x7f0000000740)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/9, 0x9}, {&(0x7f00000006c0)=""/119, 0x77}], 0xa, &(0x7f0000000800)=""/156, 0x9c}, 0x586}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/172, 0xac}, {&(0x7f0000000980)=""/45, 0x2d}, {&(0x7f00000009c0)=""/144, 0x90}], 0x3, &(0x7f0000000ac0)=""/141, 0x8d}, 0x4}, {{&(0x7f0000000b80)=@hci, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c00)=""/85, 0x55}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f0000000cc0)=""/137, 0x89}, {&(0x7f0000000d80)=""/92, 0x5c}, {&(0x7f0000000e00)=""/230, 0xe6}, {&(0x7f0000000f00)=""/97, 0x61}, {&(0x7f0000000f80)=""/92, 0x5c}], 0x7, &(0x7f0000001080)=""/45, 0x2d}, 0x3}, {{&(0x7f00000010c0)=@vsock, 0x80, &(0x7f0000002700)=[{&(0x7f0000001140)=""/177, 0xb1}, {&(0x7f0000001240)=""/7, 0x7}, {&(0x7f0000007180)=""/225, 0xe1}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/171, 0xab}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/236, 0xec}, {&(0x7f0000002580)=""/139, 0x8b}, {&(0x7f0000002640)=""/165, 0xa5}], 0x9}, 0xa42d}, {{&(0x7f00000027c0), 0x80, &(0x7f0000003c00)=[{&(0x7f0000002840)=""/156, 0x9c}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000002980)=""/43, 0x2b}, {&(0x7f00000029c0)=""/173, 0xad}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/247, 0xf7}, {&(0x7f0000007100)=""/115, 0x73}], 0x7, &(0x7f0000003c80)=""/241, 0xf1}}, {{&(0x7f0000003d80)=@can, 0x80, &(0x7f0000005180)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/221, 0xdd}, {&(0x7f0000004f00)=""/137, 0x89}, {&(0x7f0000004fc0)=""/46, 0x2e}, {&(0x7f0000005000)=""/62, 0x3e}, {&(0x7f0000005040)=""/116, 0x74}, {&(0x7f00000050c0)=""/166, 0xa6}], 0x7, &(0x7f0000005200)=""/15, 0xf}, 0x100}, {{&(0x7f0000005240)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000005440)=[{&(0x7f00000052c0)=""/63, 0x3f}, {&(0x7f0000005300)=""/147, 0x93}, {&(0x7f00000053c0)=""/99, 0x63}], 0x3}, 0xe9}, {{&(0x7f0000005480)=@hci, 0x80, &(0x7f0000006840)=[{&(0x7f0000005500)=""/129, 0x81}, {&(0x7f00000055c0)=""/156, 0x9c}, {&(0x7f0000005680)=""/160, 0xa0}, {&(0x7f0000005740)=""/179, 0xb3}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000006800)=""/48, 0x30}], 0x6, &(0x7f00000068c0)=""/231, 0xe7}, 0x9}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000001280)=""/80, 0x50}, {&(0x7f0000006a40)=""/124, 0x7c}, {&(0x7f0000006ac0)=""/11, 0xb}, {&(0x7f0000006b00)=""/69, 0x45}, {&(0x7f0000006b80)=""/173, 0xad}, {&(0x7f0000003b80)=""/108, 0x6c}, {&(0x7f0000006cc0)=""/129, 0x81}, {&(0x7f0000006d80)=""/94, 0x5e}], 0x8}, 0x400}], 0xa, 0x10042, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000c80)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x1, 0x2, 0x3, 0xa, 0x0, 0x1000}, 0x20) 06:23:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x19) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:08 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 29) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:08 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 27) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:23:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000001200)={@private1}, 0x20) 06:23:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2a, 0x0, 0x0) 06:23:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 28) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xe48d10be6cdbb5e7, 0x0) 06:23:08 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1a) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2b, 0x0, 0x0) 06:23:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, &(0x7f0000001200)={@private1}, 0x20) 06:23:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xc000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:09 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1b) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:09 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 30) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 28) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:23:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 29) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:09 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x4}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x600) close_range(r1, r2, 0x2) 06:23:09 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 31) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1e, &(0x7f0000001200)={@private1}, 0x20) 06:23:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 30) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2c, 0x0, 0x0) 06:23:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 31) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:18 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 32) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:18 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 29) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:23:18 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:18 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'rose0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0xe57, 0x7ff, 0x8, 0x10000, 0x0, 0x3ff, 0x10000, 0x5, 0x8, 0x8, 0x7ff, 0x7fff, 0xfff, 0x4, 0xffff, 0x9, 0x7, 0x6, 0x6, 0xbe, 0x2c9, 0x3}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:23:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x21, &(0x7f0000001200)={@private1}, 0x20) [ 1076.814515] FAULT_INJECTION: forcing a failure. [ 1076.814515] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.815749] CPU: 1 UID: 0 PID: 9431 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1076.815766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.815774] Call Trace: [ 1076.815778] [ 1076.815783] dump_stack_lvl+0xfa/0x120 [ 1076.815808] should_fail_ex+0x4d7/0x5e0 [ 1076.815829] ? jbd2__journal_start+0x193/0x6b0 [ 1076.815843] should_failslab+0xc2/0x120 [ 1076.815856] kmem_cache_alloc_noprof+0x5f/0x470 [ 1076.815873] ? lock_is_held_type+0x9e/0x120 [ 1076.815894] jbd2__journal_start+0x193/0x6b0 [ 1076.815909] __ext4_journal_start_sb+0x325/0x5d0 [ 1076.815928] ? ext4_dio_write_end_io+0x2ba/0x710 [ 1076.815942] ? lock_is_held_type+0x9e/0x120 [ 1076.815960] ext4_dio_write_end_io+0x2ba/0x710 [ 1076.815976] ? __pfx_ext4_dio_write_end_io+0x10/0x10 [ 1076.815992] iomap_dio_complete+0x14d/0x9e0 [ 1076.816013] iomap_dio_rw+0x73/0xa0 [ 1076.816030] ext4_file_write_iter+0xe0b/0x1990 [ 1076.816052] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1076.816067] ? __kasan_kmalloc+0x7f/0x90 [ 1076.816079] ? trace_kmalloc+0x1f/0xb0 [ 1076.816090] ? __kmalloc_noprof+0x22b/0x4c0 [ 1076.816106] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1076.816125] iter_file_splice_write+0x927/0x10c0 [ 1076.816148] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1076.816176] ? lock_is_held_type+0x9e/0x120 [ 1076.816192] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1076.816209] direct_splice_actor+0x192/0x7b0 [ 1076.816225] splice_direct_to_actor+0x347/0x9d0 [ 1076.816241] ? __pfx_direct_splice_actor+0x10/0x10 [ 1076.816259] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1076.816275] ? lock_acquire+0xdf/0x2e0 [ 1076.816290] do_splice_direct+0x179/0x250 [ 1076.816305] ? __pfx_do_splice_direct+0x10/0x10 [ 1076.816320] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1076.816336] ? security_file_permission+0x22/0x90 [ 1076.816352] do_sendfile+0xa8e/0xdc0 [ 1076.816373] ? __pfx_do_sendfile+0x10/0x10 [ 1076.816389] ? __fget_files+0x20d/0x3b0 [ 1076.816411] __x64_sys_sendfile64+0x1d3/0x210 [ 1076.816424] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1076.816441] do_syscall_64+0xbf/0x360 [ 1076.816454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.816467] RIP: 0033:0x7f292e095b19 [ 1076.816476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.816488] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1076.816499] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1076.816507] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1076.816515] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.816522] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.816529] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1076.816545] 06:23:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f0000001200)={@private1}, 0x20) 06:23:19 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 33) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:19 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 30) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:23:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 1077.027205] FAULT_INJECTION: forcing a failure. [ 1077.027205] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.028357] CPU: 1 UID: 0 PID: 9454 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1077.028374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.028382] Call Trace: [ 1077.028386] [ 1077.028391] dump_stack_lvl+0xfa/0x120 [ 1077.028414] should_fail_ex+0x4d7/0x5e0 [ 1077.028435] ? jbd2__journal_start+0x193/0x6b0 [ 1077.028448] should_failslab+0xc2/0x120 [ 1077.028461] kmem_cache_alloc_noprof+0x5f/0x470 [ 1077.028478] ? lock_is_held_type+0x9e/0x120 [ 1077.028498] jbd2__journal_start+0x193/0x6b0 [ 1077.028513] __ext4_journal_start_sb+0x325/0x5d0 [ 1077.028532] ? ext4_dio_write_end_io+0x2ba/0x710 [ 1077.028546] ? lock_is_held_type+0x9e/0x120 [ 1077.028564] ext4_dio_write_end_io+0x2ba/0x710 [ 1077.028580] ? __pfx_ext4_dio_write_end_io+0x10/0x10 [ 1077.028596] iomap_dio_complete+0x14d/0x9e0 [ 1077.028617] iomap_dio_rw+0x73/0xa0 [ 1077.028634] ext4_file_write_iter+0xe0b/0x1990 [ 1077.028656] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1077.028671] ? __kasan_kmalloc+0x7f/0x90 [ 1077.028687] ? trace_kmalloc+0x1f/0xb0 [ 1077.028698] ? __kmalloc_noprof+0x22b/0x4c0 [ 1077.028714] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1077.028733] iter_file_splice_write+0x927/0x10c0 [ 1077.028756] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1077.028784] ? lock_is_held_type+0x9e/0x120 [ 1077.028800] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1077.028817] direct_splice_actor+0x192/0x7b0 [ 1077.028834] splice_direct_to_actor+0x347/0x9d0 [ 1077.028849] ? __pfx_direct_splice_actor+0x10/0x10 [ 1077.028878] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1077.028894] ? lock_acquire+0xdf/0x2e0 [ 1077.028910] do_splice_direct+0x179/0x250 [ 1077.028925] ? __pfx_do_splice_direct+0x10/0x10 [ 1077.028939] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1077.028956] ? security_file_permission+0x22/0x90 [ 1077.028972] do_sendfile+0xa8e/0xdc0 [ 1077.028993] ? __pfx_do_sendfile+0x10/0x10 [ 1077.029009] ? __fget_files+0x20d/0x3b0 [ 1077.029032] __x64_sys_sendfile64+0x1d3/0x210 [ 1077.029045] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1077.029062] do_syscall_64+0xbf/0x360 [ 1077.029075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.029088] RIP: 0033:0x7f96d1de2b19 [ 1077.029097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.029109] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1077.029121] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1077.029129] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1077.029136] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.029143] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1077.029150] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1077.029166] 06:23:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 34) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xbd000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1d) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 32) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2d, 0x0, 0x0) 06:23:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x23, &(0x7f0000001200)={@private1}, 0x20) 06:23:27 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U-', 0x6}, 0x16, 0x1) 06:23:27 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 31) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:23:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, 0x0, 0x0) [ 1085.839094] FAULT_INJECTION: forcing a failure. [ 1085.839094] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.840963] CPU: 1 UID: 0 PID: 9482 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1085.840994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.841007] Call Trace: [ 1085.841014] [ 1085.841023] dump_stack_lvl+0xfa/0x120 [ 1085.841067] should_fail_ex+0x4d7/0x5e0 [ 1085.841103] ? copy_splice_read+0x15b/0xb70 [ 1085.841128] should_failslab+0xc2/0x120 [ 1085.841151] __kmalloc_noprof+0xb4/0x4c0 [ 1085.841187] copy_splice_read+0x15b/0xb70 [ 1085.841211] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1085.841245] ? __pfx_copy_splice_read+0x10/0x10 [ 1085.841280] ? find_held_lock+0x2b/0x80 [ 1085.841311] ? splice_direct_to_actor+0x347/0x9d0 [ 1085.841339] ? __pfx_copy_splice_read+0x10/0x10 [ 1085.841366] do_splice_read+0x1f8/0x2a0 [ 1085.841395] splice_direct_to_actor+0x2a8/0x9d0 [ 1085.841423] ? __pfx_direct_splice_actor+0x10/0x10 [ 1085.841456] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1085.841485] ? lock_acquire+0xdf/0x2e0 [ 1085.841511] do_splice_direct+0x179/0x250 [ 1085.841538] ? __pfx_do_splice_direct+0x10/0x10 [ 1085.841565] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1085.841595] ? security_file_permission+0x22/0x90 [ 1085.841622] do_sendfile+0xa8e/0xdc0 [ 1085.841659] ? __pfx_do_sendfile+0x10/0x10 [ 1085.841697] ? __fget_files+0x20d/0x3b0 [ 1085.841737] __x64_sys_sendfile64+0x1d3/0x210 [ 1085.841760] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1085.841791] do_syscall_64+0xbf/0x360 [ 1085.841814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.841837] RIP: 0033:0x7f292e095b19 [ 1085.841854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.841874] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1085.841895] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1085.841910] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1085.841923] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.841936] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.841949] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1085.841977] [ 1085.845255] FAULT_INJECTION: forcing a failure. [ 1085.845255] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.861276] CPU: 0 UID: 0 PID: 9486 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1085.861295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.861303] Call Trace: [ 1085.861308] [ 1085.861313] dump_stack_lvl+0xfa/0x120 [ 1085.861341] should_fail_ex+0x4d7/0x5e0 [ 1085.861364] ? jbd2__journal_start+0x193/0x6b0 [ 1085.861378] should_failslab+0xc2/0x120 [ 1085.861393] kmem_cache_alloc_noprof+0x5f/0x470 [ 1085.861410] ? lock_is_held_type+0x9e/0x120 [ 1085.861434] jbd2__journal_start+0x193/0x6b0 [ 1085.861449] __ext4_journal_start_sb+0x325/0x5d0 [ 1085.861468] ? ext4_dio_write_end_io+0x2ba/0x710 [ 1085.861483] ? lock_is_held_type+0x9e/0x120 [ 1085.861502] ext4_dio_write_end_io+0x2ba/0x710 [ 1085.861517] ? __pfx_ext4_dio_write_end_io+0x10/0x10 [ 1085.861534] iomap_dio_complete+0x14d/0x9e0 [ 1085.861555] iomap_dio_rw+0x73/0xa0 [ 1085.861572] ext4_file_write_iter+0xe0b/0x1990 [ 1085.861594] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1085.861609] ? __kasan_kmalloc+0x7f/0x90 [ 1085.861622] ? trace_kmalloc+0x1f/0xb0 [ 1085.861633] ? __kmalloc_noprof+0x22b/0x4c0 [ 1085.861649] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1085.861670] iter_file_splice_write+0x927/0x10c0 [ 1085.861697] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1085.861725] ? lock_is_held_type+0x9e/0x120 [ 1085.861742] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1085.861758] direct_splice_actor+0x192/0x7b0 [ 1085.861775] splice_direct_to_actor+0x347/0x9d0 [ 1085.861791] ? __pfx_direct_splice_actor+0x10/0x10 [ 1085.861808] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1085.861824] ? lock_acquire+0xdf/0x2e0 [ 1085.861842] do_splice_direct+0x179/0x250 [ 1085.861856] ? __pfx_do_splice_direct+0x10/0x10 [ 1085.861871] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1085.861887] ? security_file_permission+0x22/0x90 [ 1085.861904] do_sendfile+0xa8e/0xdc0 [ 1085.861926] ? __pfx_do_sendfile+0x10/0x10 [ 1085.861944] ? perf_trace_preemptirq_template+0x259/0x430 [ 1085.861967] __x64_sys_sendfile64+0x1d3/0x210 [ 1085.861980] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1085.861997] do_syscall_64+0xbf/0x360 [ 1085.862010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.862024] RIP: 0033:0x7f4188335b19 [ 1085.862033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.862046] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1085.862058] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1085.862066] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1085.862073] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.862080] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.862088] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1085.862104] 06:23:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x1e) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:28 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001200)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x10000, 0x0, 0xff, 0x1}, 0x20) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x475a, 0x0, 0x1, 0x4, 0x43b, 0x80}, 0x20) 06:23:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 1085.992379] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 06:23:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x24, &(0x7f0000001200)={@private1}, 0x20) 06:23:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x21) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:36 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:23:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:36 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 35) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 33) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:36 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 32) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:23:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2f, 0x0, 0x0) 06:23:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 1094.930936] FAULT_INJECTION: forcing a failure. [ 1094.930936] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.932662] CPU: 1 UID: 0 PID: 9530 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1094.932699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1094.932712] Call Trace: [ 1094.932720] [ 1094.932729] dump_stack_lvl+0xfa/0x120 [ 1094.932771] should_fail_ex+0x4d7/0x5e0 [ 1094.932807] ? jbd2__journal_start+0x193/0x6b0 [ 1094.932830] should_failslab+0xc2/0x120 [ 1094.932853] kmem_cache_alloc_noprof+0x5f/0x470 [ 1094.932883] ? lock_is_held_type+0x9e/0x120 [ 1094.932921] jbd2__journal_start+0x193/0x6b0 [ 1094.932949] __ext4_journal_start_sb+0x325/0x5d0 [ 1094.932982] ? ext4_dio_write_end_io+0x2ba/0x710 [ 1094.933009] ? lock_is_held_type+0x9e/0x120 [ 1094.933058] ext4_dio_write_end_io+0x2ba/0x710 [ 1094.933088] ? __pfx_ext4_dio_write_end_io+0x10/0x10 [ 1094.933119] iomap_dio_complete+0x14d/0x9e0 [ 1094.933156] iomap_dio_rw+0x73/0xa0 [ 1094.933187] ext4_file_write_iter+0xe0b/0x1990 [ 1094.933227] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1094.933255] ? __kasan_kmalloc+0x7f/0x90 [ 1094.933277] ? trace_kmalloc+0x1f/0xb0 [ 1094.933297] ? __kmalloc_noprof+0x22b/0x4c0 [ 1094.933326] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1094.933361] iter_file_splice_write+0x927/0x10c0 [ 1094.933404] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1094.933456] ? lock_is_held_type+0x9e/0x120 [ 1094.933486] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1094.933517] direct_splice_actor+0x192/0x7b0 [ 1094.933550] splice_direct_to_actor+0x347/0x9d0 [ 1094.933579] ? __pfx_direct_splice_actor+0x10/0x10 [ 1094.933613] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1094.933643] ? lock_acquire+0xdf/0x2e0 [ 1094.933671] do_splice_direct+0x179/0x250 [ 1094.933697] ? __pfx_do_splice_direct+0x10/0x10 [ 1094.933725] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1094.933756] ? security_file_permission+0x22/0x90 [ 1094.933785] do_sendfile+0xa8e/0xdc0 [ 1094.933822] ? __pfx_do_sendfile+0x10/0x10 [ 1094.933852] ? __fget_files+0x20d/0x3b0 [ 1094.933893] __x64_sys_sendfile64+0x1d3/0x210 [ 1094.933916] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1094.933948] do_syscall_64+0xbf/0x360 [ 1094.933971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.933993] RIP: 0033:0x7f96d1de2b19 [ 1094.934011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1094.934032] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1094.934054] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1094.934069] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1094.934082] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.934095] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1094.934108] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1094.934138] 06:23:37 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 36) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2a, &(0x7f0000001200)={@private1}, 0x20) 06:23:37 executing program 0: io_setup(0x5, &(0x7f0000000000)=0x0) io_destroy(r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) [ 1095.066927] FAULT_INJECTION: forcing a failure. [ 1095.066927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1095.069071] CPU: 1 UID: 0 PID: 9544 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) 06:23:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) [ 1095.069104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.069118] Call Trace: [ 1095.069125] [ 1095.069133] dump_stack_lvl+0xfa/0x120 [ 1095.069174] should_fail_ex+0x4d7/0x5e0 [ 1095.069210] should_fail_alloc_page+0xe0/0x110 [ 1095.069234] prepare_alloc_pages+0x1af/0x500 [ 1095.069264] alloc_pages_bulk_noprof+0x130/0xf00 [ 1095.069296] ? find_held_lock+0x2b/0x80 [ 1095.069332] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1095.069362] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1095.069400] ? __kasan_kmalloc+0x7f/0x90 [ 1095.069422] ? trace_kmalloc+0x1f/0xb0 [ 1095.069444] ? __kmalloc_noprof+0x22b/0x4c0 [ 1095.069479] copy_splice_read+0x192/0xb70 [ 1095.069513] ? __pfx_copy_splice_read+0x10/0x10 [ 1095.069548] ? find_held_lock+0x2b/0x80 [ 1095.069577] ? splice_direct_to_actor+0x347/0x9d0 [ 1095.069606] ? __pfx_copy_splice_read+0x10/0x10 [ 1095.069634] do_splice_read+0x1f8/0x2a0 [ 1095.069662] splice_direct_to_actor+0x2a8/0x9d0 [ 1095.069698] ? __pfx_direct_splice_actor+0x10/0x10 [ 1095.069730] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1095.069761] ? lock_acquire+0xdf/0x2e0 [ 1095.069787] do_splice_direct+0x179/0x250 [ 1095.069814] ? __pfx_do_splice_direct+0x10/0x10 [ 1095.069842] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1095.069871] ? security_file_permission+0x22/0x90 [ 1095.069900] do_sendfile+0xa8e/0xdc0 [ 1095.069937] ? __pfx_do_sendfile+0x10/0x10 [ 1095.069967] ? __fget_files+0x20d/0x3b0 [ 1095.070008] __x64_sys_sendfile64+0x1d3/0x210 [ 1095.070031] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1095.070063] do_syscall_64+0xbf/0x360 [ 1095.070085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.070108] RIP: 0033:0x7f292e095b19 [ 1095.070125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.070147] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1095.070168] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1095.070183] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1095.070196] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.070209] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1095.070222] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1095.070251] 06:23:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x22) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 34) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2b, &(0x7f0000001200)={@private1}, 0x20) 06:23:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x30, 0x0, 0x0) 06:23:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'geneve1\x00', {}, 0x3}) [ 1095.173408] FAULT_INJECTION: forcing a failure. [ 1095.173408] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.174409] CPU: 0 UID: 0 PID: 9555 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1095.174426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.174434] Call Trace: [ 1095.174439] [ 1095.174444] dump_stack_lvl+0xfa/0x120 [ 1095.174469] should_fail_ex+0x4d7/0x5e0 [ 1095.174490] ? copy_splice_read+0x15b/0xb70 [ 1095.174505] should_failslab+0xc2/0x120 [ 1095.174518] __kmalloc_noprof+0xb4/0x4c0 [ 1095.174538] copy_splice_read+0x15b/0xb70 [ 1095.174551] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1095.174570] ? __pfx_copy_splice_read+0x10/0x10 [ 1095.174589] ? find_held_lock+0x2b/0x80 [ 1095.174607] ? splice_direct_to_actor+0x347/0x9d0 [ 1095.174622] ? __pfx_copy_splice_read+0x10/0x10 [ 1095.174637] do_splice_read+0x1f8/0x2a0 [ 1095.174652] splice_direct_to_actor+0x2a8/0x9d0 [ 1095.174667] ? __pfx_direct_splice_actor+0x10/0x10 [ 1095.174689] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1095.174705] ? lock_acquire+0xdf/0x2e0 [ 1095.174720] do_splice_direct+0x179/0x250 [ 1095.174734] ? __pfx_do_splice_direct+0x10/0x10 [ 1095.174749] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1095.174765] ? security_file_permission+0x22/0x90 [ 1095.174782] do_sendfile+0xa8e/0xdc0 [ 1095.174802] ? __pfx_do_sendfile+0x10/0x10 [ 1095.174820] ? perf_trace_preemptirq_template+0x259/0x430 [ 1095.174843] __x64_sys_sendfile64+0x1d3/0x210 [ 1095.174856] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1095.174873] do_syscall_64+0xbf/0x360 [ 1095.174885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.174898] RIP: 0033:0x7f4188335b19 [ 1095.174908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.174920] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1095.174932] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1095.174940] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1095.174947] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.174955] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1095.174963] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1095.174978] 06:23:37 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 33) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:23:37 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x23) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:37 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 37) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x31, 0x0, 0x0) [ 1095.346519] FAULT_INJECTION: forcing a failure. [ 1095.346519] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.347602] CPU: 0 UID: 0 PID: 9574 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1095.347619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.347627] Call Trace: [ 1095.347631] [ 1095.347636] dump_stack_lvl+0xfa/0x120 [ 1095.347662] should_fail_ex+0x4d7/0x5e0 [ 1095.347687] ? iter_file_splice_write+0x1cd/0x10c0 [ 1095.347704] should_failslab+0xc2/0x120 [ 1095.347718] __kmalloc_noprof+0xb4/0x4c0 [ 1095.347740] iter_file_splice_write+0x1cd/0x10c0 [ 1095.347758] ? kfree+0x285/0x470 [ 1095.347772] ? copy_splice_read+0x83d/0xb70 [ 1095.347789] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1095.347806] ? __lock_acquire+0xc65/0x1b70 [ 1095.347834] ? lock_is_held_type+0x9e/0x120 [ 1095.347853] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1095.347869] direct_splice_actor+0x192/0x7b0 [ 1095.347886] splice_direct_to_actor+0x347/0x9d0 [ 1095.347903] ? __pfx_direct_splice_actor+0x10/0x10 [ 1095.347921] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1095.347938] ? lock_acquire+0xdf/0x2e0 [ 1095.347953] do_splice_direct+0x179/0x250 [ 1095.347968] ? __pfx_do_splice_direct+0x10/0x10 [ 1095.347983] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1095.348000] ? security_file_permission+0x22/0x90 [ 1095.348017] do_sendfile+0xa8e/0xdc0 [ 1095.348040] ? __pfx_do_sendfile+0x10/0x10 [ 1095.348058] ? perf_trace_preemptirq_template+0x259/0x430 [ 1095.348082] __x64_sys_sendfile64+0x1d3/0x210 [ 1095.348096] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1095.348115] do_syscall_64+0xbf/0x360 [ 1095.348128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.348141] RIP: 0033:0x7f292e095b19 [ 1095.348150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.348162] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1095.348174] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1095.348182] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1095.348189] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.348197] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1095.348204] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1095.348222] 06:23:46 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 38) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:46 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, 0x0, 0x0) 06:23:46 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x24) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 35) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2c, &(0x7f0000001200)={@private1}, 0x20) 06:23:46 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8101) r1 = signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000280)={{}, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="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", 0x164, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x1128}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@mcast2, 0x5, 0x2, 0x0, 0x1, 0x4, 0x17}, 0x20) 06:23:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 34) truncate(&(0x7f0000000040)='./file0\x00', 0x0) [ 1104.128183] FAULT_INJECTION: forcing a failure. [ 1104.128183] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.129272] CPU: 0 UID: 0 PID: 9590 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1104.129289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1104.129297] Call Trace: [ 1104.129301] [ 1104.129306] dump_stack_lvl+0xfa/0x120 [ 1104.129332] should_fail_ex+0x4d7/0x5e0 [ 1104.129353] ? copy_splice_read+0x15b/0xb70 [ 1104.129368] should_failslab+0xc2/0x120 [ 1104.129381] __kmalloc_noprof+0xb4/0x4c0 [ 1104.129403] copy_splice_read+0x15b/0xb70 [ 1104.129416] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1104.129436] ? __pfx_copy_splice_read+0x10/0x10 [ 1104.129450] ? __pfx_perf_trace_lock+0x10/0x10 [ 1104.129469] ? find_held_lock+0x2b/0x80 [ 1104.129488] ? splice_direct_to_actor+0x347/0x9d0 [ 1104.129506] ? __pfx_copy_splice_read+0x10/0x10 [ 1104.129522] do_splice_read+0x1f8/0x2a0 [ 1104.129538] splice_direct_to_actor+0x2a8/0x9d0 [ 1104.129553] ? __pfx_direct_splice_actor+0x10/0x10 [ 1104.129572] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1104.129588] ? lock_acquire+0xdf/0x2e0 [ 1104.129603] do_splice_direct+0x179/0x250 [ 1104.129618] ? __pfx_do_splice_direct+0x10/0x10 [ 1104.129633] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1104.129650] ? security_file_permission+0x22/0x90 [ 1104.129666] do_sendfile+0xa8e/0xdc0 [ 1104.129692] ? __pfx_do_sendfile+0x10/0x10 [ 1104.129711] ? perf_trace_preemptirq_template+0x259/0x430 [ 1104.129734] __x64_sys_sendfile64+0x1d3/0x210 [ 1104.129747] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1104.129765] do_syscall_64+0xbf/0x360 [ 1104.129779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.129792] RIP: 0033:0x7f96d1de2b19 [ 1104.129801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1104.129813] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1104.129825] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1104.129833] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1104.129841] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.129848] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1104.129856] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1104.129873] 06:23:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2d, &(0x7f0000001200)={@private1}, 0x20) 06:23:46 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2a) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x33, 0x0, 0x0) 06:23:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2e, &(0x7f0000001200)={@private1}, 0x20) 06:23:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2b) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 35) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:23:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:56 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 39) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 36) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000002c0)={{r3}, 0x1, &(0x7f0000000280)=[0x4], 0x3, 0x1, [0xb55c00000000000, 0xffffffffffff3227, 0xffff, 0x9]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x4, 0x800}, 0x20) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/156, 0x9c}, {&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000140)=""/152, 0x98}], 0x3) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) [ 1114.829399] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1114.893891] FAULT_INJECTION: forcing a failure. [ 1114.893891] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.895645] CPU: 1 UID: 0 PID: 9635 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1114.895675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1114.895694] Call Trace: [ 1114.895702] [ 1114.895711] dump_stack_lvl+0xfa/0x120 [ 1114.895759] should_fail_ex+0x4d7/0x5e0 [ 1114.895796] ? jbd2__journal_start+0x193/0x6b0 [ 1114.895820] should_failslab+0xc2/0x120 [ 1114.895843] kmem_cache_alloc_noprof+0x5f/0x470 [ 1114.895875] ? lock_is_held_type+0x9e/0x120 [ 1114.895913] jbd2__journal_start+0x193/0x6b0 [ 1114.895941] __ext4_journal_start_sb+0x325/0x5d0 [ 1114.895974] ? ext4_dirty_inode+0xa5/0x130 [ 1114.896012] ext4_dirty_inode+0xa5/0x130 [ 1114.896046] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1114.896079] __mark_inode_dirty+0x1b7/0xd00 [ 1114.896106] generic_update_time+0xcb/0xf0 [ 1114.896144] file_modified+0x1f0/0x230 [ 1114.896168] ext4_file_write_iter+0xca3/0x1990 [ 1114.896208] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1114.896236] ? __kasan_kmalloc+0x7f/0x90 [ 1114.896259] ? trace_kmalloc+0x1f/0xb0 [ 1114.896280] ? __kmalloc_noprof+0x22b/0x4c0 [ 1114.896308] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1114.896343] iter_file_splice_write+0x927/0x10c0 [ 1114.896385] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1114.896436] ? lock_is_held_type+0x9e/0x120 [ 1114.896467] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1114.896498] direct_splice_actor+0x192/0x7b0 [ 1114.896528] splice_direct_to_actor+0x347/0x9d0 [ 1114.896557] ? __pfx_direct_splice_actor+0x10/0x10 [ 1114.896590] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1114.896620] ? lock_acquire+0xdf/0x2e0 [ 1114.896648] do_splice_direct+0x179/0x250 [ 1114.896674] ? __pfx_do_splice_direct+0x10/0x10 [ 1114.896702] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1114.896732] ? security_file_permission+0x22/0x90 [ 1114.896761] do_sendfile+0xa8e/0xdc0 [ 1114.896799] ? __pfx_do_sendfile+0x10/0x10 [ 1114.896829] ? __fget_files+0x20d/0x3b0 [ 1114.896869] __x64_sys_sendfile64+0x1d3/0x210 [ 1114.896894] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1114.896927] do_syscall_64+0xbf/0x360 [ 1114.896949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.896972] RIP: 0033:0x7f292e095b19 [ 1114.896989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1114.897010] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1114.897032] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1114.897047] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1114.897060] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1114.897074] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1114.897088] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1114.897117] 06:23:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2f, &(0x7f0000001200)={@private1}, 0x20) 06:23:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x35, 0x0, 0x0) 06:23:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 36) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:23:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 1115.103295] FAULT_INJECTION: forcing a failure. [ 1115.103295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1115.105192] CPU: 1 UID: 0 PID: 9650 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1115.105225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1115.105239] Call Trace: [ 1115.105247] [ 1115.105274] dump_stack_lvl+0xfa/0x120 [ 1115.105319] should_fail_ex+0x4d7/0x5e0 [ 1115.105357] should_fail_alloc_page+0xe0/0x110 [ 1115.105382] prepare_alloc_pages+0x1af/0x500 [ 1115.105413] alloc_pages_bulk_noprof+0x130/0xf00 [ 1115.105447] ? find_held_lock+0x2b/0x80 [ 1115.105483] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1115.105512] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1115.105551] ? __kasan_kmalloc+0x7f/0x90 [ 1115.105574] ? trace_kmalloc+0x1f/0xb0 [ 1115.105595] ? __kmalloc_noprof+0x22b/0x4c0 [ 1115.105631] copy_splice_read+0x192/0xb70 [ 1115.105666] ? __pfx_copy_splice_read+0x10/0x10 [ 1115.105708] ? find_held_lock+0x2b/0x80 [ 1115.105736] ? splice_direct_to_actor+0x347/0x9d0 [ 1115.105765] ? __pfx_copy_splice_read+0x10/0x10 [ 1115.105797] do_splice_read+0x1f8/0x2a0 [ 1115.105825] splice_direct_to_actor+0x2a8/0x9d0 [ 1115.105854] ? __pfx_direct_splice_actor+0x10/0x10 [ 1115.105887] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1115.105916] ? lock_acquire+0xdf/0x2e0 [ 1115.105942] do_splice_direct+0x179/0x250 [ 1115.105968] ? __pfx_do_splice_direct+0x10/0x10 [ 1115.105995] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1115.106025] ? security_file_permission+0x22/0x90 [ 1115.106054] do_sendfile+0xa8e/0xdc0 [ 1115.106091] ? __pfx_do_sendfile+0x10/0x10 [ 1115.106121] ? __fget_files+0x20d/0x3b0 [ 1115.106161] __x64_sys_sendfile64+0x1d3/0x210 [ 1115.106184] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1115.106216] do_syscall_64+0xbf/0x360 [ 1115.106238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.106262] RIP: 0033:0x7f96d1de2b19 [ 1115.106280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1115.106302] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1115.106324] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1115.106339] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1115.106352] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.106366] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1115.106379] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1115.106408] 06:23:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x30, &(0x7f0000001200)={@private1}, 0x20) 06:23:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2d) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:23:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 37) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:23:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:23:57 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 40) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 1115.370320] FAULT_INJECTION: forcing a failure. [ 1115.370320] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.372389] CPU: 0 UID: 0 PID: 9670 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1115.372423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1115.372438] Call Trace: [ 1115.372445] [ 1115.372455] dump_stack_lvl+0xfa/0x120 [ 1115.372501] should_fail_ex+0x4d7/0x5e0 [ 1115.372541] ? iter_file_splice_write+0x1cd/0x10c0 [ 1115.372573] should_failslab+0xc2/0x120 [ 1115.372597] __kmalloc_noprof+0xb4/0x4c0 [ 1115.372639] iter_file_splice_write+0x1cd/0x10c0 [ 1115.372673] ? kfree+0x285/0x470 [ 1115.372709] ? copy_splice_read+0x83d/0xb70 [ 1115.372744] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1115.372776] ? __lock_acquire+0xc65/0x1b70 [ 1115.372824] ? lock_is_held_type+0x9e/0x120 [ 1115.372859] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1115.372893] direct_splice_actor+0x192/0x7b0 [ 1115.372926] splice_direct_to_actor+0x347/0x9d0 [ 1115.372958] ? __pfx_direct_splice_actor+0x10/0x10 [ 1115.373008] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1115.373041] ? lock_acquire+0xdf/0x2e0 [ 1115.373070] do_splice_direct+0x179/0x250 [ 1115.373099] ? __pfx_do_splice_direct+0x10/0x10 [ 1115.373130] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1115.373163] ? security_file_permission+0x22/0x90 [ 1115.373195] do_sendfile+0xa8e/0xdc0 [ 1115.373236] ? __pfx_do_sendfile+0x10/0x10 [ 1115.373290] ? perf_trace_preemptirq_template+0x259/0x430 [ 1115.373330] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1115.373371] __x64_sys_sendfile64+0x1d3/0x210 [ 1115.373397] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1115.373433] do_syscall_64+0xbf/0x360 [ 1115.373458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.373483] RIP: 0033:0x7f4188335b19 [ 1115.373502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1115.373525] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1115.373549] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1115.373566] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1115.373580] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.373594] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1115.373609] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1115.373641] [ 1115.407724] ================================================================== [ 1115.408840] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x24d/0x560 [ 1115.409905] Write of size 8 at addr ffff8880133f1e00 by task syz-executor.5/9670 [ 1115.411022] [ 1115.411296] CPU: 0 UID: 0 PID: 9670 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1115.411327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1115.411341] Call Trace: [ 1115.411349] [ 1115.411359] dump_stack_lvl+0xca/0x120 [ 1115.411396] print_report+0xcb/0x670 [ 1115.411424] ? __virt_addr_valid+0x100/0x5d0 [ 1115.411457] ? flush_tlb_func+0x24d/0x560 [ 1115.411491] ? flush_tlb_func+0x24d/0x560 [ 1115.411525] kasan_report+0xca/0x100 [ 1115.411551] ? flush_tlb_func+0x24d/0x560 [ 1115.411589] kasan_check_range+0x37/0x1a0 [ 1115.411620] flush_tlb_func+0x24d/0x560 [ 1115.411654] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1115.411688] ? __pfx_flush_tlb_func+0x10/0x10 [ 1115.411723] __flush_smp_call_function_queue+0x20d/0x740 [ 1115.411763] __sysvec_call_function_single+0x6d/0x360 [ 1115.411804] sysvec_call_function_single+0x5f/0xc0 [ 1115.411837] asm_sysvec_call_function_single+0x1a/0x20 [ 1115.411863] RIP: 0010:handle_softirqs+0x174/0x770 [ 1115.411898] Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf 84 47 06 00 00 e8 22 65 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d [ 1115.411922] RSP: 0018:ffff88806ce08f78 EFLAGS: 00000202 [ 1115.411942] RAX: 00000000000004ba RBX: 00000000ffffffff RCX: 0000000000000008 [ 1115.411957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e [ 1115.411972] RBP: ffff88803ea477c8 R08: 0000000000000001 R09: 0000000000000001 [ 1115.411987] R10: ffffffff86438657 R11: 0000000000000001 R12: 0000000000000000 [ 1115.412001] R13: 0000000000000000 R14: 0000000000000302 R15: 0000000000000000 [ 1115.412021] ? handle_softirqs+0x16e/0x770 [ 1115.412053] ? handle_softirqs+0x16e/0x770 [ 1115.412088] __irq_exit_rcu+0xc4/0x100 [ 1115.412119] irq_exit_rcu+0x9/0x20 [ 1115.412149] sysvec_apic_timer_interrupt+0x70/0x80 [ 1115.412181] [ 1115.412189] [ 1115.412197] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1115.412222] RIP: 0010:dump_stack_lvl+0x115/0x120 [ 1115.412257] Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 e6 50 7b fc e8 d1 07 a5 fc 48 89 ee 31 ff e8 d7 a5 c4 fc e8 72 aa c4 fc e8 7d d4 cc fc fb 5b <5d> 41 5c e9 63 aa c4 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 1115.412280] RSP: 0018:ffff88803ea47870 EFLAGS: 00000206 [ 1115.412298] RAX: 00000000000004b7 RBX: ffffffff85d01f20 RCX: 0000000000000080 [ 1115.412313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84aeec13 [ 1115.412327] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 [ 1115.412342] R10: ffffffff86438657 R11: 0000000000000001 R12: ffffffff8530f500 [ 1115.412357] R13: ffffffff85d01f30 R14: 0000000000000000 R15: 0000000000000000 [ 1115.412378] ? dump_stack_lvl+0x113/0x120 [ 1115.412414] should_fail_ex+0x4d7/0x5e0 [ 1115.412448] ? iter_file_splice_write+0x1cd/0x10c0 [ 1115.412478] should_failslab+0xc2/0x120 [ 1115.412498] __kmalloc_noprof+0xb4/0x4c0 [ 1115.412538] iter_file_splice_write+0x1cd/0x10c0 [ 1115.412581] ? kfree+0x285/0x470 [ 1115.412607] ? copy_splice_read+0x83d/0xb70 [ 1115.412637] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1115.412669] ? __lock_acquire+0xc65/0x1b70 [ 1115.412702] ? lock_is_held_type+0x9e/0x120 [ 1115.412735] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1115.412767] direct_splice_actor+0x192/0x7b0 [ 1115.412798] splice_direct_to_actor+0x347/0x9d0 [ 1115.412827] ? __pfx_direct_splice_actor+0x10/0x10 [ 1115.412859] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1115.412889] ? lock_acquire+0xdf/0x2e0 [ 1115.412913] do_splice_direct+0x179/0x250 [ 1115.412941] ? __pfx_do_splice_direct+0x10/0x10 [ 1115.412970] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1115.412999] ? security_file_permission+0x22/0x90 [ 1115.413026] do_sendfile+0xa8e/0xdc0 [ 1115.413060] ? __pfx_do_sendfile+0x10/0x10 [ 1115.413094] ? perf_trace_preemptirq_template+0x259/0x430 [ 1115.413129] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1115.413167] __x64_sys_sendfile64+0x1d3/0x210 [ 1115.413191] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1115.413219] do_syscall_64+0xbf/0x360 [ 1115.413241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.413282] RIP: 0033:0x7f4188335b19 [ 1115.413299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1115.413322] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1115.413344] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1115.413360] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1115.413374] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.413388] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1115.413403] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1115.413426] [ 1115.413434] [ 1115.484676] Allocated by task 5591: [ 1115.485215] kasan_save_stack+0x24/0x50 [ 1115.485823] kasan_save_track+0x14/0x30 [ 1115.486432] __kasan_slab_alloc+0x59/0x70 [ 1115.487038] kmem_cache_alloc_noprof+0x13e/0x470 [ 1115.487751] copy_process+0x6f3a/0x73e0 [ 1115.488367] kernel_clone+0xea/0x820 [ 1115.488938] __do_sys_clone+0xce/0x120 [ 1115.489524] do_syscall_64+0xbf/0x360 [ 1115.490082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.490854] [ 1115.491109] Freed by task 9662: [ 1115.491605] kasan_save_stack+0x24/0x50 [ 1115.492213] kasan_save_track+0x14/0x30 [ 1115.492808] kasan_save_free_info+0x3c/0x90 [ 1115.493473] __kasan_slab_free+0x3c/0x60 [ 1115.494086] kmem_cache_free+0x2a5/0x460 [ 1115.494710] mmput+0x305/0x390 [ 1115.495206] do_exit+0x79d/0x2970 [ 1115.495723] do_group_exit+0xd3/0x2a0 [ 1115.496293] get_signal+0x2315/0x2340 [ 1115.496874] arch_do_signal_or_restart+0x80/0x790 [ 1115.497603] exit_to_user_mode_loop+0x8b/0x100 [ 1115.498291] do_syscall_64+0x2f7/0x360 [ 1115.498861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.499616] [ 1115.499877] The buggy address belongs to the object at ffff8880133f1480 [ 1115.499877] which belongs to the cache mm_struct of size 2456 [ 1115.501639] The buggy address is located 2432 bytes inside of [ 1115.501639] freed 2456-byte region [ffff8880133f1480, ffff8880133f1e18) [ 1115.503380] [ 1115.503640] The buggy address belongs to the physical page: [ 1115.504444] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133f0 [ 1115.505602] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1115.506715] memcg:ffff88800c251b01 [ 1115.507241] anon flags: 0x100000000000040(head|node=0|zone=1) [ 1115.508094] page_type: f5(slab) [ 1115.508580] raw: 0100000000000040 ffff888008c4bc80 0000000000000000 dead000000000001 [ 1115.509714] raw: 0000000000000000 00000000800c000c 00000000f5000000 ffff88800c251b01 [ 1115.510833] head: 0100000000000040 ffff888008c4bc80 0000000000000000 dead000000000001 [ 1115.511963] head: 0000000000000000 00000000800c000c 00000000f5000000 ffff88800c251b01 [ 1115.513096] head: 0100000000000003 ffffea00004cfc01 00000000ffffffff 00000000ffffffff [ 1115.514217] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1115.515342] page dumped because: kasan: bad access detected [ 1115.516146] [ 1115.516395] Memory state around the buggy address: [ 1115.517097] ffff8880133f1d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1115.518143] ffff8880133f1d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1115.519172] >ffff8880133f1e00: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1115.520218] ^ [ 1115.520721] ffff8880133f1e80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1115.521780] ffff8880133f1f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1115.522820] ================================================================== [ 1115.523843] Disabling lock debugging due to kernel taint [ 1115.660308] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 06:24:05 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 37) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 06:24:05 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000040)=""/216, 0xd8}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/116, 0x74}], 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) 06:24:05 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 41) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:24:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x31, &(0x7f0000001200)={@private1}, 0x20) 06:24:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x36, 0x0, 0x0) 06:24:05 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2e) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:24:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) 06:24:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 38) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 1123.790904] FAULT_INJECTION: forcing a failure. [ 1123.790904] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.791892] CPU: 0 UID: 0 PID: 9689 Comm: syz-executor.4 Tainted: G B 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1123.791912] Tainted: [B]=BAD_PAGE [ 1123.791916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.791923] Call Trace: [ 1123.791927] [ 1123.791931] dump_stack_lvl+0xfa/0x120 [ 1123.791956] should_fail_ex+0x4d7/0x5e0 [ 1123.791976] ? jbd2__journal_start+0x193/0x6b0 [ 1123.791989] should_failslab+0xc2/0x120 [ 1123.792002] kmem_cache_alloc_noprof+0x5f/0x470 [ 1123.792018] ? __ext4_journal_stop+0x10b/0x1f0 [ 1123.792038] jbd2__journal_start+0x193/0x6b0 [ 1123.792052] __ext4_journal_start_sb+0x325/0x5d0 [ 1123.792068] ? ext4_file_write_iter+0xd74/0x1990 [ 1123.792085] ext4_file_write_iter+0xd74/0x1990 [ 1123.792104] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1123.792119] ? __kasan_kmalloc+0x7f/0x90 [ 1123.792131] ? trace_kmalloc+0x1f/0xb0 [ 1123.792142] ? __kmalloc_noprof+0x22b/0x4c0 [ 1123.792157] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1123.792176] iter_file_splice_write+0x927/0x10c0 [ 1123.792196] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1123.792219] ? lock_release+0x1c7/0x290 [ 1123.792232] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1123.792247] direct_splice_actor+0x192/0x7b0 [ 1123.792263] splice_direct_to_actor+0x347/0x9d0 [ 1123.792278] ? __pfx_direct_splice_actor+0x10/0x10 [ 1123.792294] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1123.792309] ? perf_trace_lock+0xb5/0x5d0 [ 1123.792324] do_splice_direct+0x179/0x250 [ 1123.792338] ? __pfx_do_splice_direct+0x10/0x10 [ 1123.792352] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1123.792367] ? security_file_permission+0x22/0x90 [ 1123.792382] do_sendfile+0xa8e/0xdc0 [ 1123.792401] ? __pfx_do_sendfile+0x10/0x10 [ 1123.792418] ? perf_trace_preemptirq_template+0x259/0x430 [ 1123.792439] __x64_sys_sendfile64+0x1d3/0x210 [ 1123.792451] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1123.792467] do_syscall_64+0xbf/0x360 [ 1123.792479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.792492] RIP: 0033:0x7f292e095b19 [ 1123.792501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.792513] RSP: 002b:00007f292b60b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1123.792525] RAX: ffffffffffffffda RBX: 00007f292e1a8f60 RCX: 00007f292e095b19 [ 1123.792533] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1123.792540] RBP: 00007f292b60b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1123.792547] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1123.792554] R13: 00007fff1d606fef R14: 00007f292b60b300 R15: 0000000000022000 [ 1123.792567] [ 1123.834106] FAULT_INJECTION: forcing a failure. [ 1123.834106] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.835775] CPU: 1 UID: 0 PID: 9696 Comm: syz-executor.7 Tainted: G B 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1123.835811] Tainted: [B]=BAD_PAGE [ 1123.835819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1123.835832] Call Trace: [ 1123.835840] [ 1123.835848] dump_stack_lvl+0xfa/0x120 [ 1123.835888] should_fail_ex+0x4d7/0x5e0 [ 1123.835923] ? iter_file_splice_write+0x1cd/0x10c0 [ 1123.835951] should_failslab+0xc2/0x120 [ 1123.835974] __kmalloc_noprof+0xb4/0x4c0 [ 1123.836008] iter_file_splice_write+0x1cd/0x10c0 [ 1123.836038] ? kfree+0x285/0x470 [ 1123.836062] ? copy_splice_read+0x83d/0xb70 [ 1123.836091] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1123.836123] ? __pfx_copy_splice_read+0x10/0x10 [ 1123.836157] ? lock_release+0x1c7/0x290 [ 1123.836181] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1123.836210] direct_splice_actor+0x192/0x7b0 [ 1123.836239] splice_direct_to_actor+0x347/0x9d0 [ 1123.836267] ? __pfx_direct_splice_actor+0x10/0x10 [ 1123.836297] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1123.836325] ? perf_trace_lock+0xb5/0x5d0 [ 1123.836352] do_splice_direct+0x179/0x250 [ 1123.836378] ? __pfx_do_splice_direct+0x10/0x10 [ 1123.836404] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1123.836432] ? security_file_permission+0x22/0x90 [ 1123.836458] do_sendfile+0xa8e/0xdc0 [ 1123.836492] ? __pfx_do_sendfile+0x10/0x10 [ 1123.836521] ? __fget_files+0x20d/0x3b0 [ 1123.836558] __x64_sys_sendfile64+0x1d3/0x210 [ 1123.836580] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1123.836608] do_syscall_64+0xbf/0x360 [ 1123.836630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.836653] RIP: 0033:0x7f96d1de2b19 [ 1123.836670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1123.836703] RSP: 002b:00007f96cf358188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1123.836725] RAX: ffffffffffffffda RBX: 00007f96d1ef5f60 RCX: 00007f96d1de2b19 [ 1123.836740] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1123.836754] RBP: 00007f96cf3581d0 R08: 0000000000000000 R09: 0000000000000000 [ 1123.836767] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1123.836780] R13: 00007ffd298512af R14: 00007f96cf358300 R15: 0000000000022000 [ 1123.836804] 06:24:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, 0x0, 0x0) 06:24:06 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xc0000) (fail_nth: 42) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) 06:24:06 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x2f) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 06:24:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f0000001200)={@private1}, 0x20) 06:24:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) (fail_nth: 39) truncate(&(0x7f0000000040)='./file0\x00', 0x7f) [ 1124.051497] FAULT_INJECTION: forcing a failure. [ 1124.051497] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.053264] CPU: 1 UID: 0 PID: 9719 Comm: syz-executor.5 Tainted: G B 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 1124.053299] Tainted: [B]=BAD_PAGE [ 1124.053307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1124.053320] Call Trace: [ 1124.053327] [ 1124.053334] dump_stack_lvl+0xfa/0x120 [ 1124.053390] should_fail_ex+0x4d7/0x5e0 [ 1124.053423] ? jbd2__journal_start+0x193/0x6b0 [ 1124.053445] should_failslab+0xc2/0x120 [ 1124.053467] kmem_cache_alloc_noprof+0x5f/0x470 [ 1124.053500] jbd2__journal_start+0x193/0x6b0 [ 1124.053524] __ext4_journal_start_sb+0x325/0x5d0 [ 1124.053557] ? ext4_dirty_inode+0xa5/0x130 [ 1124.053591] ext4_dirty_inode+0xa5/0x130 [ 1124.053623] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1124.053656] __mark_inode_dirty+0x1b7/0xd00 [ 1124.053679] generic_update_time+0xcb/0xf0 [ 1124.053721] file_modified+0x1f0/0x230 [ 1124.053742] ext4_file_write_iter+0xca3/0x1990 [ 1124.053774] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1124.053802] ? __kasan_kmalloc+0x7f/0x90 [ 1124.053823] ? trace_kmalloc+0x1f/0xb0 [ 1124.053843] ? __kmalloc_noprof+0x22b/0x4c0 [ 1124.053871] ? splice_from_pipe_next.part.0+0x165/0x510 [ 1124.053901] iter_file_splice_write+0x927/0x10c0 [ 1124.053934] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1124.053971] ? lock_release+0x1c7/0x290 [ 1124.053993] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1124.054022] direct_splice_actor+0x192/0x7b0 [ 1124.054049] splice_direct_to_actor+0x347/0x9d0 [ 1124.054075] ? __pfx_direct_splice_actor+0x10/0x10 [ 1124.054104] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1124.054130] ? lock_release+0x1c7/0x290 [ 1124.054153] do_splice_direct+0x179/0x250 [ 1124.054178] ? __pfx_do_splice_direct+0x10/0x10 [ 1124.054204] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1124.054231] ? security_file_permission+0x22/0x90 [ 1124.054255] do_sendfile+0xa8e/0xdc0 [ 1124.054288] ? __pfx_do_sendfile+0x10/0x10 [ 1124.054318] ? perf_trace_preemptirq_template+0x259/0x430 [ 1124.054354] __x64_sys_sendfile64+0x1d3/0x210 [ 1124.054376] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1124.054401] do_syscall_64+0xbf/0x360 [ 1124.054422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.054444] RIP: 0033:0x7f4188335b19 [ 1124.054460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1124.054481] RSP: 002b:00007f41858ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1124.054503] RAX: ffffffffffffffda RBX: 00007f4188448f60 RCX: 00007f4188335b19 [ 1124.054518] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1124.054531] RBP: 00007f41858ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.054544] R10: 00000000000c0000 R11: 0000000000000246 R12: 0000000000000002 [ 1124.054558] R13: 00007ffe0f1ddc4f R14: 00007f41858ab300 R15: 0000000000022000 [ 1124.054578] VM DIAGNOSIS: 06:23:57 Registers: info registers vcpu 0 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b9285 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88806ce08838 R8 =0000000000000000 R9 =ffffed1001430046 R10=000000000000005f R11=303178302f303120 R12=000000000000005f R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b9270 RIP=ffffffff828b92dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f41858ab700 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562d531c4840 CR3=000000001d6e5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000103aefd8ff5 RBX=00000103aefd8ff5 RCX=ffffffff8161796c RDX=ffff8880157e0000 RSI=00000103aefd8ff5 RDI=00000103b245ff52 RBP=ffff88806cf28080 RSP=ffff88806cf08ef8 R8 =0000000000000000 R9 =fffffbfff0c870ca R10=0000000000000000 R11=0000000000000001 R12=00000103b245ff52 R13=ffff88806cf280e8 R14=ffff88806cf280f8 R15=ffff88806cf28080 RIP=ffffffff81739124 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd31e457900 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd31d9ba300 CR3=000000000bedd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=6873756c66203f203d4547415353454d XMM01=5f626c745f6873756c66203f203d4547 XMM02=ffffffffffffffffffffffffffffffff XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=6da3179206e758eb00000000001b5780 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=46f29b4f1dd1c80c00000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000