14ba9b796bd401c41f5c0e72d167dec29260e202bde1e2205a11851100f03cfd4812afee40d6f7444afc34416be58a449a856ec7c7913d2650a97596a5b0760c9ee7577c7ee40663a785539ca0ecece2c6c429ad5c24ebaed5d34c6999628c34f215e7ab696b2a1c92b2da982a6f274242d1128a38861ef0a2176e3d8fc379d23dccd0137b8cb10e88ef26b0a1c833ec84ceeeede5b34b4381fa8d69df6408c2702866982de733b7a36e37c6619b49b11f79a706b304fb8f9aedbb53c144c2301755a1793bf413fdc9a53199d4dbd746fc25abe09a134af513f1b75c98381691e9f3340c7605de9be1a6d57ba7adc4f5487675edef40d1c0f597afb531b5bf8305c6e47bb989973e32267820058afc199ed1bb2b653852d9f31dc238984f5e540701114f1ad933ddf1c4dcfda9e6dd90ef485a750391ffbd85a771d1266e731e29c68e107c4d2a8951cdb6ee67c385c82ac158c93e186db08d450d64a766da8a92507df1ca672bb20399b695a898dbaf176dc42b08ebe8b2ffdc3f8f197f7bb72b00b65f2ffd0c4df4ab1a722a5d2d15e667c3be7bf537a774a183ea58d691d53e795068897875c5d37ab8ad848c87575a9363e9307968e54f378985314b250020550bfe9ba91645d67a9695279c8b9e23a8b5c4b4bdb35c25e7ddb0f9fbe27e1ddd00c81a86fb673e51184b942899a0a26bc9d37a36e58ac94332bdbd8b880d3439dbf7e548f1c6371ade2d8a2217dad4531335427422bb6b127dcab9263386c0858031b520f94c58bca4b0617694438836802d1ff3af1b20e22516039ca9fb5dfe200ddef839d5bf721a8536c36827f1526e037b3789f9559967be41146daa72b63ac49d3fdc7d1c8bb7dedc76296ceb84632be3ac9785d398bab785e59613c1c75c04f1f03023af242d9b7493b4164c89d87de06d135ce77a31c0329059bc0d3de432a28268ef2cc84e34d735b958a95826ac9d75275b992fe4520000c1896d324edd446a960b9819dfb3f4688d77d132df3484baa9c85d44b82658a16ec96af3cc315175cc4c3b4ca87f892de8673cfccae68b55ca7d51bbbae7afacfb09d91903e7babdee98f8f119a449074ca786eb309efce0d89cb3e27e9f724c623f3085dc4f296671ec50acac52a6906d3fac6c661a4500161d4e10094ce878188e46bc32f622fe8f80c2065ddcb3d881f271c3ec0f5eb0c92f7d6f274c3ae6567deee5ce279d1275bc1fcdc97d493d2dfc7c3dd1affcf009df9adeb4502e3ada206e0cc37df5178a895ab09654ae5376756c1c3c5fa6e1bdb5cb20f55409e7b1dddcca9a54bb1ae6751aae58a983b868848d5607124b0032e6243a3ce59ba1c05bb91759e113b9372ae54fb58ceaebbfd8f7315d47c92d1d85e7c7a8e923601fb87887820f3181089e6377c6d28385b745312eb23836991d30fdcf26f1461b0326e08d65546ef11badf80a694f74370445ad3cf2346123933dd072865aef7e076cfc82d9dc381326af074a77962c0dea85e7e65a810cecb297d42e5da65e890e7b1cad3480a13067546e566bad757218caea109fbd3d187958d3f4b41b584be5c63c4dbbd1484086f04a5b8cb17e52c12ac0f21b00abcfcde0ce9d8872937cc3fe720c6f96c0f63c628c4f8f15d6c28e5256fe29e371a422ab6b8fd699f1484ec4638c2a1b57d0c77d37e5b63c17720fb3204ade158c35143c1e825c99bdf152db3ac81a9452278d4f71ec19196bb51ebbd01c433d9dab4f1ab3aff73b62810f819043465f47f940ccaa05631d8ce7865c324105726c54dde018a537f972dd31b483256154ca9f784a093c03fe370f73ac8f073a02c9964ca4cddc6c795035b07177ec1a469ef72f3b57a0267ab36ce5e89fcbc75e86e1db83f3bf60d0378ac75579a417abf6c928fdd47cade6d446f03b77d793bfd66bbdb900294e0b5a608be1d3ee085a7b1bb16259fda90d12a4e36ca16cdcb8b210ed3ae2b8eaff0dd081f1b09d4144771dac2e8d7ae02f1300bc605ae826a4a6e7038a72958c779def40d51e99f45cd20134e4a1c95c8a72834ac0885f9b78cc110044dc6f31e1227deffe98fe727b37f1f123f9e80f95d6dbeddf191c6817845bf7182e363c374435e58cc8a39a4855182499db49f4a58ed8f67baddca2ed4105af1bedaf597d054ec55326dc95b09d42c9e89e614ecba1db61bf0a8a37bc54fd859c7446219fa0076b2cc3e8f84dcc00b131f473694755000ea7a2d523d363ac7d06f2f09959ead3256e7021caf8ef8f804efbba81e455eed008742bec4e35140a16cd0b7df401d77dd0c8ed2c02b0f219b5c37968b2425ea6292ed612797e1e5981e4d058887b2a11efff8b3914cbe8cfe4756a5f16fcf85669e80b2e5e2129a5805ceb214eb8118bc91d9f68c7e50e3b71d0ee42f1f9a6aa2ae5ae5721655b5a08e965e4b4d65849770e4420d3c953115a906910a033e3a8b0e0b3ff1e3b05d2cfc1826aa3129aca6feb88b3290dc0be8357ad5c12f9c2984c8ae2870bec87c39019a1e3f5eddd9d69f7c7e7face1872e6f1a3db70ef04f1f5ae04f221f5a18ed87aeb0b0cbd04b6ac77251e89d3d24cf7888d5f8d54ceb33b49172685f90b2b74d1fbaecbc864819efaf9347bccb479171c661e2641613f67af75a4374dbd7f98f423a404c197a3532dd580a6edad5e1352c0f9a4f37583fce802eff5990d96d7922fe2b8e7f2d02e15391cb160ad49a1321b5b1bf56102b1bbb6e9cff6a76cc393e63a8691c44dd00e0fa725175a278a0d0ac1f585a84cf3a0a14f4f3392b74b9b2ee9ad6275988e08fe08c24d26bda40682630759b9c4fae3eafcd2f4a68df4038b681e70c5e5594e31f8662be724604aa1b17da3cf0b2558023d5a00114b3128e424e9f23a97a6d67f4f690d217c7569662c6679389e25b99340b41bde5d4f462384fdeedf038ae410702a23e6c578c07a70d1d8aae3dfc8ef3ca2e5dafa6b2dc4b4a3c34a4b7beed35f7bae1d94f6ced6913da4ced02f6badd675717bc066c675d3136506c456344536317a17a60dfa42ff55e02356bddd6581d5a46349d2597460a9bc5ea247e5d050bc065a3f9b4afb7747c8f6aa7303390c806dedb44c91db6535ef1acf72d386bfc95f86e6587e25ca907561dcc20bfa5ddc392170e4857afec3cd037915e0ccb400314d487ab4f3d12c0c08aeb7642b6776d096b892845f1aee216ba9b4862d0fc8cbc49af35e52926516d72fcd547c80299fd167815b6bf0698f2f9818b4c0da12683b832c1f6be61e90ac658d553da0b4b4673a55db5e1af2beb2bfac69da770a072d28fdb856c3c8e1878ff44ee33eab2006b686fb2b1d936ca31acf588c084a73a46e521879d7be665b86c66e65ef4bf371bdae98b2cc8f0b3238d7f75398948de452c20a91f6c22856fc726b36772bd308f010f8f54fac6a96cfddd2fbff65b7f15ac25fb901c5686f99eb6f0c5649b721df1186f9b74fbc4a85a56c37b4d934d704c0a2aff1a6a71e727ee877bdfd86df1fda8c223a8c2818c50a978ca13b899734c3b58f2ff24951005128d0c24d0dc814da9aa7bcc92edc36b3f070dcd8241a37eaaddf6b004f242d557b7fed066028882ed998e9343954a73dccfb91a773b76b648c2d518601dc2338ca04000db52f771e4b09194894292a7e7b5dfffddb621b30e84e5574bc73bd939756bd6bb095113c791075448ec6d0de2647495a825466f138ac98b16277c862c185e6185bcee587364d63d9f90e026d45adceec6d6fe72714c51935b7a957e26b3817b472eb3398e59f9fd5912be1e082db509b12a871b08b79d728574e6688bd1f9ed540a25c8887145cd50fb3eb78cebe8804674c289de828276c0e8c79f14342bd2645053dcb3685c366bd6b74b6b41eb938152cdd1a1d7b781abf7ec692602962459ec3699e481638dc50eba8e631798cc8a74d636fd611ef75bfd94f39fd0d014ab5d856d9c613155a2b0ea6f0dc2b494c8d46810654a4295e960616b3381ad7dac8f4abe0ef7af11e898af214057e04314b0d9a3c122c35155142e09e99d2d4d08484049f9ff33c76e0663833b0971f79304b887f8f0b759c1bbe84354aa660e93bf9d5c25d391617e0fa808d239b984e43deeb04f32c5bf4865e8b579ae6627353a7c5c2752fc7d7f87745b1ccd2322ed19be8ebffb958716d111030c3c1868091c93f7cdb990d43cb620dbf04b55a1289af0475026ec2c320867a59eeae0a8b7624fac140b4a7329e47646154ebe74b1aa7c7385d2d47ebcda9ddefed2b4a8c31053dd61f5d27d2a18f4c998e5f9f1a36f995b95749db914bead707e287c343fa765efa699d51abc0457ebb71a1d64611baa90989c7c9cc78ad8d9f789a28c01bad211d288f3051775b00be3fd95661620db851701f7d3a7f89ec1ae4c7cb02096fd834d3cef563e18806d11f76baf8facc7eb27f0b037bab0dcba3a3adad8fa1b87a6208783faee0c2fc5120dc4de4a0975e51efaebf27f414334a9123a94d6dcafd360e0c64f01da0dd06b58ad43de56ed8ae10ca94845ba60add188a4df2b3f2c851fc74fde7484dff36780d1c08d508ba6829745a7fbb83c4df44eacda5d16f264ab26648cbd132e3c007ad9a77eb5d4c0f8669fa6edbf639cfa96c905a364e30bcc7fd02e917bf8a60bb4dc66d24b2b5c94fe6757f21181809b92d34dfcc93822cdda42eeb55376395c67a9c3a901304471290f950284a36c20e2ed81b4b5f75df8f4d2e7727fd6431be31c23dfcf8b73e98a099efd03dfd70e7922ee524dbac0067a8ebce2618701d947190624f6cdfbe46c334b54d30c1f3de10b160d1519634c594652e8a420e97ceecea3ad622becf0631c6d5b50776246c08b716e94c884ddce0cd48a2e62838c89554f44b07f70f624311b632fe3f76e99a6b68c1e9fe78914d3184ea83e9bb7437f37e3e3c72576d720119a5cc8339ece8f657f2aadb17914f9c4b7a3c10f86add391184cc6419671e5acf2a6c8a8eb66a20ee1fb12fc13f5e31e2d611b7f6a1eb8b71e61f2a3066206e700a27e04e2241ce5836542f91625d2a40e12ed72ccf033fce7ec118848ba0774f71cf914243d0f6026f8ad454fbc9c397a78cab9bbde579e2c31287d30cd728fc2105dd516cf8bdf3333aced69bb0834b7f2cd78bd076bc65eeca94f35a434a37b8fd1062a567b59ad8ae57394ba86f04fabbfc33a5b456d31b7a5b2ffc8f50dddc07d18721e7bcf5d7f73fe75e46833e30c5b5b5fdb26a1914a1adf85d4a2b3cd29ef11d0083a76e54234cdade67a7034e49df4eed9483563530ac7d73a4c8dc82a6379d5921b79536a8ae7acfad20f1dc921db4163add96ef510ccab65067805fad86a21c142a96ec72027", 0x1000}, {&(0x7f0000000300)="e787ff76340099aa8164cf85f308bd3d28d98e0fed070efde3f74be7126b56417a6cdf96e585b4e4aa360f0cc5915ccccd5d4a5fe1c179ca9012da50bcaeac46c4882659f98ffde48e16fab9a6acee6389f8dd15c54f84e4fa03103cf5fc01fc030abbb76989f2365e2a5f8f40ebd113fa463872680a9055678f960e762a7793e9f6f1c92e6dd319245adece579ca34f8874f318dfa628ddfa2229159ea6d2b0688db30498fb8f425a9ee9f35c887e826537c3e36ad581ca79ef4b0a215a1490", 0xc0}, {&(0x7f00000001c0)="2ac958e90f5f6cb23d1939e131ce434003dbd6faef564a7db756211d8d3532e814df68a335c9dc7f577b4bc9682d5f942c689bccd41b6e367aee9ab83a90a7677e64f47710875aee38164b537824166bf6e4cda6", 0x54}, {&(0x7f00000003c0)="04b60f08dcd58bd11829c7308746e0c7be705dea8c67dcd7341234b4151964d5e3c086d98a2083711e59e68f940ae3ddd91be62e9459386a51ce4460320bc68928f6cd9b8f0d91eb145c7fe3083c025bf6b3435803e9fca689c09a8da6d8b9c46d59a565be76210c33ab3e583e8d3c53a01e573031ec8a06ef06ed6b7c343f1d08241e1339dcc9013eacd3bdfdc6092b4ba7466c18617279ea881b68876e76", 0x9f}, {&(0x7f0000000480)="5d1890b33a57053ba07140472865989a3fc68eb70c14e65a551fd442bde95226d1d3bfd1817a02033e361b67210df02fb61f162b6af5af0087fee3739348507ecc5fb3fd4c39baf08b44c16e65658816ffc33c6b07ba96784e6c2eedf5ca8ebbe5fdc6c3ad08b45fe5be16dcb38aa9cb8e4a546a9db63491ff5a4c019a4b52a51d58bc9b84a6f90f539861ee885ae5af6cecdf03257d49897ba7d23e79aafd013d43ee7be038e085cfdd0bb370950f1cff8ad8b8e71ffb01648ee0eb334e42091f9a9a7e56db3d6f454f72500fc8d132eb02318cd36c", 0xd6}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f0000000580)="3db1b8507fdf69ac4734edb08d73575421f461923a584069dd", 0x19}, {&(0x7f00000026c0)="f67ab25fa089350d5de6f34a141046c5f3ca78010fdb59645a7a25c3e0ec874b800c4df4938df66fe4184f62ba4ccb0d034b75871952dd62b4221f4326250c21d433bc0d75f5711b510f4185c15ba2fb4089e7a4ca02450983367747753cca649f00cdde57a797c40b370c26a9faef8e9fe226e90ec33d2dcef7cfea6814b2f864d391332b6a91ff88873fe246f03f42fe7d89a9045ab6edf614e11dbfb2c137def5bd97ff07b9290710f5ee5d608f1737d19525b173ffce76f1bbe1d3a67cb2a265928c3a44fa7df4a4990be2bb3f99bdd6cf72f3b689b8c5d46d12f309e8e9028e53665c56ff7aa151bb6e2d918c293cf9", 0xf2}, {&(0x7f00000005c0)="2a918f76ee33344c6dfd70812ceffb70924051e11639497aa5f80ab983c47737ffc4cb023f09d1f576c3333f17c42a4412f56e6b20f73ff74ac726d290", 0x3d}], 0x9, 0x0, 0x0, 0x20004040}, 0x200000c4) gettid() pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:14:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 2) [ 792.883609] FAULT_INJECTION: forcing a failure. [ 792.883609] name failslab, interval 1, probability 0, space 0, times 0 [ 792.884890] CPU: 0 PID: 6297 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220407 #1 [ 792.885756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 792.886934] Call Trace: [ 792.887203] [ 792.887439] dump_stack_lvl+0x8b/0xb3 [ 792.887856] should_fail.cold+0x5/0xa [ 792.888264] ? create_object.isra.0+0x3a/0xa20 [ 792.888771] should_failslab+0x5/0x10 [ 792.889194] kmem_cache_alloc+0x5b/0x480 [ 792.889642] create_object.isra.0+0x3a/0xa20 [ 792.890111] ? kasan_unpoison+0x23/0x50 [ 792.890535] __kmalloc_node_track_caller+0x269/0x440 [ 792.891082] ? netlink_sendmsg+0x98d/0xe00 [ 792.891536] __alloc_skb+0xe3/0x340 [ 792.891939] netlink_sendmsg+0x98d/0xe00 [ 792.892379] ? netlink_unicast+0x800/0x800 [ 792.892868] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.893448] ? netlink_unicast+0x800/0x800 [ 792.893910] sock_sendmsg+0x150/0x190 [ 792.894318] ____sys_sendmsg+0x703/0x870 [ 792.894760] ? kernel_sendmsg+0x50/0x50 [ 792.895176] ? __ia32_sys_recvmmsg+0x260/0x260 [ 792.895671] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 792.896246] ? lock_release+0x3b2/0x750 [ 792.896700] ___sys_sendmsg+0xf3/0x170 [ 792.897120] ? sendmsg_copy_msghdr+0x160/0x160 [ 792.897610] ? lock_release+0x3b2/0x750 [ 792.898044] ? lock_downgrade+0x6d0/0x6d0 [ 792.898486] ? lock_release+0x3b2/0x750 [ 792.899087] ? ksys_write+0x20c/0x250 [ 792.899550] ? lock_downgrade+0x6d0/0x6d0 [ 792.899998] ? __fget_files+0x287/0x470 [ 792.900444] ? __fget_light+0xea/0x270 [ 792.900873] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 792.901476] __sys_sendmsg+0xe5/0x1b0 [ 792.901882] ? __sys_sendmsg_sock+0x30/0x30 [ 792.902348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.902933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 792.903505] do_syscall_64+0x3b/0x90 [ 792.903900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 792.904458] RIP: 0033:0x7f066655fb19 [ 792.904853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.906744] RSP: 002b:00007f0663ad5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.907534] RAX: ffffffffffffffda RBX: 00007f0666672f60 RCX: 00007f066655fb19 [ 792.908274] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 792.909021] RBP: 00007f0663ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.909772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.910512] R13: 00007ffe1e4b661f R14: 00007f0663ad5300 R15: 0000000000022000 [ 792.911268] [ 792.914004] FAULT_INJECTION: forcing a failure. [ 792.914004] name failslab, interval 1, probability 0, space 0, times 0 [ 792.915602] CPU: 0 PID: 6295 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 792.916522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 792.917866] Call Trace: [ 792.918150] [ 792.918406] dump_stack_lvl+0x8b/0xb3 [ 792.918836] should_fail.cold+0x5/0xa [ 792.919243] should_failslab+0x5/0x10 [ 792.919656] __kmalloc_node_track_caller+0x7e/0x440 [ 792.920192] ? netlink_sendmsg+0x98d/0xe00 [ 792.920664] __alloc_skb+0xe3/0x340 [ 792.921060] netlink_sendmsg+0x98d/0xe00 [ 792.921505] ? netlink_unicast+0x800/0x800 [ 792.921970] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.922561] ? netlink_unicast+0x800/0x800 [ 792.923024] sock_sendmsg+0x150/0x190 [ 792.923436] ____sys_sendmsg+0x703/0x870 [ 792.923869] ? kernel_sendmsg+0x50/0x50 [ 792.924298] ? __ia32_sys_recvmmsg+0x260/0x260 [ 792.924821] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 792.925398] ? lock_release+0x3b2/0x750 [ 792.925841] ___sys_sendmsg+0xf3/0x170 [ 792.926278] ? sendmsg_copy_msghdr+0x160/0x160 [ 792.926780] ? lock_release+0x3b2/0x750 [ 792.927221] ? lock_downgrade+0x6d0/0x6d0 [ 792.927669] ? lock_release+0x3b2/0x750 [ 792.928096] ? ksys_write+0x20c/0x250 [ 792.928497] ? lock_downgrade+0x6d0/0x6d0 [ 792.928962] ? __fget_files+0x287/0x470 [ 792.929397] ? __fget_light+0xea/0x270 [ 792.929818] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 792.930418] __sys_sendmsg+0xe5/0x1b0 [ 792.930833] ? __sys_sendmsg_sock+0x30/0x30 [ 792.931301] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 792.931903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 792.932465] do_syscall_64+0x3b/0x90 [ 792.932873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 792.933433] RIP: 0033:0x7f094bc34b19 [ 792.933831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.935792] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.936618] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 792.937376] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 792.938134] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.938898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.939649] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 792.940422] [ 792.944515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:14:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 3) 00:14:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000027c0)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000300)="e787ff76340099aa8164cf85f308bd3d28d98e0fed070efde3f74be7126b56417a6cdf96e585b4e4aa360f0cc5915ccccd5d4a5fe1c179ca9012da50bcaeac46c4882659f98ffde48e16fab9a6acee6389f8dd15c54f84e4fa03103cf5fc01fc030abbb76989f2365e2a5f8f40ebd113fa463872680a9055678f960e762a7793e9f6f1c92e6dd319245adece579ca34f8874f318dfa628ddfa2229159ea6d2b0688db30498fb8f425a9ee9f35c887e826537c3e36ad581ca79ef4b0a215a1490", 0xc0}, {&(0x7f00000001c0)="2ac958e90f5f6cb23d1939e131ce434003dbd6faef564a7db756211d8d3532e814df68a335c9dc7f577b4bc9682d5f942c689bccd41b6e367aee9ab83a90a7677e64f47710875aee38164b537824166bf6e4cda6", 0x54}, {&(0x7f00000003c0)="04b60f08dcd58bd11829c7308746e0c7be705dea8c67dcd7341234b4151964d5e3c086d98a2083711e59e68f940ae3ddd91be62e9459386a51ce4460320bc68928f6cd9b8f0d91eb145c7fe3083c025bf6b3435803e9fca689c09a8da6d8b9c46d59a565be76210c33ab3e583e8d3c53a01e573031ec8a06ef06ed6b7c343f1d08241e1339dcc9013eacd3bdfdc6092b4ba7466c18617279ea881b68876e76", 0x9f}, {&(0x7f0000000480)="5d1890b33a57053ba07140472865989a3fc68eb70c14e65a551fd442bde95226d1d3bfd1817a02033e361b67210df02fb61f162b6af5af0087fee3739348507ecc5fb3fd4c39baf08b44c16e65658816ffc33c6b07ba96784e6c2eedf5ca8ebbe5fdc6c3ad08b45fe5be16dcb38aa9cb8e4a546a9db63491ff5a4c019a4b52a51d58bc9b84a6f90f539861ee885ae5af6cecdf03257d49897ba7d23e79aafd013d43ee7be038e085cfdd0bb370950f1cff8ad8b8e71ffb01648ee0eb334e42091f9a9a7e56db3d6f454f72500fc8d132eb02318cd36c", 0xd6}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f0000000580)="3db1b8507fdf69ac4734edb08d73575421f461923a584069dd", 0x19}, {&(0x7f00000026c0)="f67ab25fa089350d5de6f34a141046c5f3ca78010fdb59645a7a25c3e0ec874b800c4df4938df66fe4184f62ba4ccb0d034b75871952dd62b4221f4326250c21d433bc0d75f5711b510f4185c15ba2fb4089e7a4ca02450983367747753cca649f00cdde57a797c40b370c26a9faef8e9fe226e90ec33d2dcef7cfea6814b2f864d391332b6a91ff88873fe246f03f42fe7d89a9045ab6edf614e11dbfb2c137def5bd97ff07b9290710f5ee5d608f1737d19525b173ffce76f1bbe1d3a67cb2a265928c3a44fa7df4a4990be2bb3f99bdd6cf72f3b689b8c5d46d12f309e8e9028e53665c56ff7aa151bb6e2d918c293cf9", 0xf2}, {&(0x7f00000005c0)="2a918f76ee33344c6dfd70812ceffb70924051e11639497aa5f80ab983c47737ffc4cb023f09d1f576c3333f17c42a4412f56e6b20f73ff74ac726d290", 0x3d}], 0x9, 0x0, 0x0, 0x20004040}, 0x200000c4) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:14:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 7) [ 793.025738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 00:14:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xffc99a3b) 00:14:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 6) 00:14:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000fddda786adff1800000000000000df"]) 00:14:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) [ 793.108050] FAULT_INJECTION: forcing a failure. [ 793.108050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.110685] CPU: 1 PID: 6316 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220407 #1 [ 793.112425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 793.114819] Call Trace: [ 793.115361] [ 793.115833] dump_stack_lvl+0x8b/0xb3 [ 793.116684] should_fail.cold+0x5/0xa [ 793.117508] _copy_from_iter+0x37d/0x14d0 [ 793.118412] ? _copy_from_iter_nocache+0x14a0/0x14a0 [ 793.119494] ? rcu_read_lock_sched_held+0x3a/0x70 [ 793.120528] ? memset+0x20/0x40 [ 793.121245] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 793.122420] ? __virt_addr_valid+0xe9/0x350 [ 793.123349] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 793.124416] ? is_vmalloc_addr+0x7b/0xb0 [ 793.125299] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 793.126466] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 793.127535] ? __check_object_size+0x1b5/0x890 [ 793.128522] netlink_sendmsg+0x86b/0xe00 [ 793.129406] ? netlink_unicast+0x800/0x800 [ 793.130319] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.131478] ? netlink_unicast+0x800/0x800 [ 793.132382] sock_sendmsg+0x150/0x190 [ 793.133212] ____sys_sendmsg+0x703/0x870 [ 793.134075] ? kernel_sendmsg+0x50/0x50 [ 793.134911] ? __ia32_sys_recvmmsg+0x260/0x260 [ 793.135878] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 793.137025] ? lock_release+0x3b2/0x750 [ 793.137883] ___sys_sendmsg+0xf3/0x170 [ 793.138727] ? sendmsg_copy_msghdr+0x160/0x160 [ 793.139704] ? lock_release+0x3b2/0x750 [ 793.140572] ? lock_downgrade+0x6d0/0x6d0 [ 793.141458] ? lock_release+0x3b2/0x750 [ 793.142315] ? ksys_write+0x20c/0x250 [ 793.143123] ? lock_downgrade+0x6d0/0x6d0 [ 793.144022] ? __fget_files+0x287/0x470 [ 793.144905] ? __fget_light+0xea/0x270 [ 793.145739] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 793.146908] __sys_sendmsg+0xe5/0x1b0 [ 793.147725] ? __sys_sendmsg_sock+0x30/0x30 [ 793.148650] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.149831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 793.150935] do_syscall_64+0x3b/0x90 [ 793.151721] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.152840] RIP: 0033:0x7f066655fb19 [ 793.153617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.157471] RSP: 002b:00007f0663ad5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.159104] RAX: ffffffffffffffda RBX: 00007f0666672f60 RCX: 00007f066655fb19 [ 793.160645] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 793.162178] RBP: 00007f0663ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.163705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.165239] R13: 00007ffe1e4b661f R14: 00007f0663ad5300 R15: 0000000000022000 [ 793.166788] 00:14:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) listen(r1, 0x1) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 793.197490] FAULT_INJECTION: forcing a failure. [ 793.197490] name failslab, interval 1, probability 0, space 0, times 0 [ 793.199874] CPU: 1 PID: 6317 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 793.201522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 793.203762] Call Trace: [ 793.204269] [ 793.204737] dump_stack_lvl+0x8b/0xb3 [ 793.205510] should_fail.cold+0x5/0xa [ 793.206274] ? __alloc_skb+0x211/0x340 [ 793.207056] should_failslab+0x5/0x10 [ 793.207823] kmem_cache_alloc_node+0x55/0x490 [ 793.208747] __alloc_skb+0x211/0x340 [ 793.209493] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.210604] netlink_sendmsg+0x98d/0xe00 [ 793.211437] ? netlink_unicast+0x800/0x800 [ 793.212301] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.213430] ? netlink_unicast+0x800/0x800 [ 793.214286] sock_sendmsg+0x150/0x190 [ 793.215054] ____sys_sendmsg+0x703/0x870 [ 793.215874] ? kernel_sendmsg+0x50/0x50 [ 793.216678] ? __ia32_sys_recvmmsg+0x260/0x260 [ 793.217599] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 793.218654] ? lock_release+0x3b2/0x750 [ 793.219464] ___sys_sendmsg+0xf3/0x170 [ 793.220253] ? sendmsg_copy_msghdr+0x160/0x160 [ 793.221184] ? lock_release+0x3b2/0x750 [ 793.221984] ? lock_downgrade+0x6d0/0x6d0 [ 793.222815] ? lock_release+0x3b2/0x750 [ 793.223613] ? ksys_write+0x20c/0x250 [ 793.224376] ? lock_downgrade+0x6d0/0x6d0 [ 793.225234] ? __fget_files+0x287/0x470 [ 793.226051] ? __fget_light+0xea/0x270 [ 793.226838] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 793.227952] __sys_sendmsg+0xe5/0x1b0 [ 793.228730] ? __sys_sendmsg_sock+0x30/0x30 [ 793.229701] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.230852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 793.231899] do_syscall_64+0x3b/0x90 [ 793.232666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.233703] RIP: 0033:0x7efdda772b19 [ 793.234435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.238066] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.239563] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 793.240978] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 793.242385] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.243791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.245214] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 793.246645] [ 793.278577] FAULT_INJECTION: forcing a failure. [ 793.278577] name failslab, interval 1, probability 0, space 0, times 0 [ 793.279896] CPU: 0 PID: 6326 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 793.280759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 793.281949] Call Trace: [ 793.282214] [ 793.282448] dump_stack_lvl+0x8b/0xb3 [ 793.282865] should_fail.cold+0x5/0xa [ 793.283270] ? create_object.isra.0+0x3a/0xa20 [ 793.283752] should_failslab+0x5/0x10 [ 793.284156] kmem_cache_alloc+0x5b/0x480 [ 793.284594] create_object.isra.0+0x3a/0xa20 [ 793.285067] ? kasan_unpoison+0x23/0x50 [ 793.285489] __kmalloc_node_track_caller+0x269/0x440 [ 793.286031] ? netlink_sendmsg+0x98d/0xe00 [ 793.286496] __alloc_skb+0xe3/0x340 [ 793.286890] netlink_sendmsg+0x98d/0xe00 [ 793.287326] ? netlink_unicast+0x800/0x800 [ 793.287792] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.288402] ? netlink_unicast+0x800/0x800 [ 793.288891] sock_sendmsg+0x150/0x190 [ 793.289316] ____sys_sendmsg+0x703/0x870 [ 793.289764] ? kernel_sendmsg+0x50/0x50 [ 793.290199] ? __ia32_sys_recvmmsg+0x260/0x260 [ 793.290705] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 793.291282] ? lock_release+0x3b2/0x750 [ 793.291724] ___sys_sendmsg+0xf3/0x170 [ 793.292153] ? sendmsg_copy_msghdr+0x160/0x160 [ 793.292664] ? lock_release+0x3b2/0x750 [ 793.293099] ? lock_downgrade+0x6d0/0x6d0 [ 793.293550] ? lock_release+0x3b2/0x750 [ 793.293984] ? ksys_write+0x20c/0x250 [ 793.294404] ? lock_downgrade+0x6d0/0x6d0 [ 793.294857] ? __fget_files+0x287/0x470 [ 793.295307] ? __fget_light+0xea/0x270 [ 793.295735] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 793.296340] __sys_sendmsg+0xe5/0x1b0 [ 793.296778] ? __sys_sendmsg_sock+0x30/0x30 [ 793.297254] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 793.297862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 793.298439] do_syscall_64+0x3b/0x90 [ 793.298845] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.299411] RIP: 0033:0x7f094bc34b19 [ 793.299814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.301804] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.302621] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 793.303386] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 793.304151] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.304928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.305689] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 793.306472] [ 793.308430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:15:04 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) io_uring_enter(r5, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x300, 0x0, 0x37) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:15:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:15:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 8) 00:15:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 4) 00:15:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4042, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) setsockopt(0xffffffffffffffff, 0xfffffff9, 0x6, &(0x7f0000000280)="3322b39537aeb434a644551c1d3648c8c80827540d747a3a9eae1a132d61c47d3110e4216b57ed1e51c472f3df81b963d9a839ce11a36f3df232a9afcf48c026374cd86f7d3a87475c4161d84d4c3bee567d4a2bb2dca3db57a366d0998d4ff5764c696e3ea45c", 0x67) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffff48}, 0x1c) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000152}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}}, 0x20000003) creat(&(0x7f0000000000)='./file1\x00', 0x0) 00:15:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 7) 00:15:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 00:15:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000fddda786adff1800000000000000df"]) [ 807.524557] FAULT_INJECTION: forcing a failure. [ 807.524557] name failslab, interval 1, probability 0, space 0, times 0 [ 807.528187] CPU: 1 PID: 6334 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220407 #1 [ 807.530798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 807.534373] Call Trace: [ 807.537407] [ 807.538086] dump_stack_lvl+0x8b/0xb3 [ 807.539276] should_fail.cold+0x5/0xa [ 807.540438] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 807.542539] should_failslab+0x5/0x10 [ 807.543686] __kmalloc+0x72/0x440 [ 807.544795] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.546479] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 807.548411] genl_family_rcv_msg_doit+0xda/0x330 [ 807.549849] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 807.551925] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.553658] ? cap_capable+0x1eb/0x250 [ 807.554904] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.556612] ? security_capable+0x95/0xc0 [ 807.557911] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.559562] ? ns_capable+0xd9/0x100 [ 807.560750] genl_rcv_msg+0x33c/0x5a0 [ 807.561951] ? genl_get_cmd+0x480/0x480 [ 807.563218] ? nl80211_set_channel+0x70/0x70 [ 807.564708] ? lock_release+0x750/0x750 [ 807.565983] netlink_rcv_skb+0x14b/0x430 [ 807.567285] ? genl_get_cmd+0x480/0x480 [ 807.568537] ? netlink_ack+0xa80/0xa80 [ 807.569792] ? netlink_deliver_tap+0x1b2/0xc30 [ 807.571208] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 807.572880] ? is_vmalloc_addr+0x7b/0xb0 [ 807.574156] genl_rcv+0x24/0x40 [ 807.575196] netlink_unicast+0x54a/0x800 [ 807.576473] ? netlink_attachskb+0x880/0x880 [ 807.577851] ? is_vmalloc_addr+0x7b/0xb0 [ 807.579135] netlink_sendmsg+0x904/0xe00 [ 807.580425] ? netlink_unicast+0x800/0x800 [ 807.581779] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.583480] ? netlink_unicast+0x800/0x800 [ 807.584834] sock_sendmsg+0x150/0x190 [ 807.586006] ____sys_sendmsg+0x703/0x870 [ 807.587282] ? kernel_sendmsg+0x50/0x50 [ 807.588520] ? __ia32_sys_recvmmsg+0x260/0x260 [ 807.589950] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 807.591335] ? lock_release+0x3b2/0x750 [ 807.592338] ___sys_sendmsg+0xf3/0x170 [ 807.593465] ? sendmsg_copy_msghdr+0x160/0x160 [ 807.594613] ? lock_release+0x3b2/0x750 [ 807.595590] ? lock_downgrade+0x6d0/0x6d0 [ 807.596651] ? lock_release+0x3b2/0x750 [ 807.597868] ? ksys_write+0x20c/0x250 [ 807.598812] ? lock_downgrade+0x6d0/0x6d0 [ 807.599850] ? __fget_files+0x287/0x470 [ 807.600897] ? __fget_light+0xea/0x270 [ 807.601406] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 807.602114] __sys_sendmsg+0xe5/0x1b0 [ 807.602612] ? __sys_sendmsg_sock+0x30/0x30 [ 807.603165] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.603885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 807.604557] do_syscall_64+0x3b/0x90 [ 807.605150] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.605808] RIP: 0033:0x7f066655fb19 [ 807.606275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.608519] RSP: 002b:00007f0663ad5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.609545] RAX: ffffffffffffffda RBX: 00007f0666672f60 RCX: 00007f066655fb19 [ 807.610425] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 807.611293] RBP: 00007f0663ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.612162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.613071] R13: 00007ffe1e4b661f R14: 00007f0663ad5300 R15: 0000000000022000 [ 807.613978] [ 807.633417] FAULT_INJECTION: forcing a failure. [ 807.633417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.634947] CPU: 1 PID: 6343 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 807.635933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 807.637380] Call Trace: [ 807.637698] [ 807.637979] dump_stack_lvl+0x8b/0xb3 [ 807.638477] should_fail.cold+0x5/0xa [ 807.638967] _copy_from_iter+0x37d/0x14d0 [ 807.639504] FAULT_INJECTION: forcing a failure. [ 807.639504] name failslab, interval 1, probability 0, space 0, times 0 [ 807.639506] ? _copy_from_iter_nocache+0x14a0/0x14a0 [ 807.641549] ? rcu_read_lock_sched_held+0x3a/0x70 [ 807.642196] ? memset+0x20/0x40 [ 807.642629] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 807.643341] ? __virt_addr_valid+0xe9/0x350 [ 807.643906] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 807.644546] ? is_vmalloc_addr+0x7b/0xb0 [ 807.645094] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 807.645731] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 807.646310] ? __check_object_size+0x1b5/0x890 [ 807.646849] netlink_sendmsg+0x86b/0xe00 [ 807.647338] ? netlink_unicast+0x800/0x800 [ 807.647840] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.648480] ? netlink_unicast+0x800/0x800 [ 807.649046] sock_sendmsg+0x150/0x190 [ 807.649496] ____sys_sendmsg+0x703/0x870 [ 807.649973] ? kernel_sendmsg+0x50/0x50 [ 807.650433] ? __ia32_sys_recvmmsg+0x260/0x260 [ 807.650966] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 807.651575] ? lock_release+0x3b2/0x750 [ 807.652045] ___sys_sendmsg+0xf3/0x170 [ 807.652503] ? sendmsg_copy_msghdr+0x160/0x160 [ 807.653085] ? lock_release+0x3b2/0x750 [ 807.653550] ? lock_downgrade+0x6d0/0x6d0 [ 807.654034] ? lock_release+0x3b2/0x750 [ 807.654495] ? ksys_write+0x20c/0x250 [ 807.654937] ? lock_downgrade+0x6d0/0x6d0 [ 807.655424] ? __fget_files+0x287/0x470 [ 807.655902] ? __fget_light+0xea/0x270 [ 807.656359] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 807.657057] __sys_sendmsg+0xe5/0x1b0 [ 807.657507] ? __sys_sendmsg_sock+0x30/0x30 [ 807.658009] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.658662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 807.659273] do_syscall_64+0x3b/0x90 [ 807.659708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.660309] RIP: 0033:0x7f094bc34b19 [ 807.660739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.662884] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.663750] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 807.664559] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 807.665423] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.666234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.667046] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 807.667874] [ 807.668144] CPU: 0 PID: 6344 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 807.669180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 807.670533] Call Trace: [ 807.670855] [ 807.671135] dump_stack_lvl+0x8b/0xb3 [ 807.671619] should_fail.cold+0x5/0xa [ 807.672099] ? create_object.isra.0+0x3a/0xa20 [ 807.672667] should_failslab+0x5/0x10 [ 807.673177] kmem_cache_alloc+0x5b/0x480 [ 807.673695] create_object.isra.0+0x3a/0xa20 [ 807.674251] ? kasan_unpoison+0x23/0x50 [ 807.674759] kmem_cache_alloc_node+0x248/0x490 [ 807.675343] __alloc_skb+0x211/0x340 [ 807.675817] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.676517] netlink_sendmsg+0x98d/0xe00 [ 807.677074] ? netlink_unicast+0x800/0x800 [ 807.677620] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.678311] ? netlink_unicast+0x800/0x800 [ 807.678839] sock_sendmsg+0x150/0x190 [ 807.679322] ____sys_sendmsg+0x703/0x870 [ 807.679844] ? kernel_sendmsg+0x50/0x50 [ 807.680343] ? __ia32_sys_recvmmsg+0x260/0x260 [ 807.680960] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 807.681603] ? lock_release+0x3b2/0x750 [ 807.682110] ___sys_sendmsg+0xf3/0x170 [ 807.682604] ? sendmsg_copy_msghdr+0x160/0x160 [ 807.683171] ? lock_release+0x3b2/0x750 [ 807.683676] ? lock_downgrade+0x6d0/0x6d0 [ 807.684204] ? lock_release+0x3b2/0x750 [ 807.684705] ? ksys_write+0x20c/0x250 [ 807.685213] ? lock_downgrade+0x6d0/0x6d0 [ 807.685738] ? __fget_files+0x287/0x470 [ 807.686255] ? __fget_light+0xea/0x270 [ 807.686745] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 807.687431] __sys_sendmsg+0xe5/0x1b0 [ 807.687918] ? __sys_sendmsg_sock+0x30/0x30 00:15:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) [ 807.688450] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.689197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 807.689799] do_syscall_64+0x3b/0x90 [ 807.690254] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.697233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 807.697449] RIP: 0033:0x7efdda772b19 [ 807.698829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.701066] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.702134] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 807.703128] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 807.704130] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.705248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.706226] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 807.707243] 00:15:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000002c0), 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="93f4e257da65e74cd7d2ede1c7124c012ca46e761c390c", 0x17}, {&(0x7f00000001c0)="d3d541d6d2cee474f6f5f03e14b394fb5e0c1a006bc8acbceadbdd3c1211de6cf2d63ddb38bfe4929fa943b3c52990271ea4467dbbc8e290562816799563a64993a37a781cdaaedf8a79f22de41ebecad44f2617", 0x54}], 0x2}, 0x810) shutdown(r0, 0x0) poll(&(0x7f0000000080), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) accept4(r3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x80000) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0x6, 0x0, &(0x7f0000000180)) close(r6) 00:15:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000fddda786adff1800000000000000df"]) 00:15:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 8) [ 807.850942] FAULT_INJECTION: forcing a failure. [ 807.850942] name failslab, interval 1, probability 0, space 0, times 0 [ 807.852562] CPU: 1 PID: 6356 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 807.857778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 807.859336] Call Trace: [ 807.859690] [ 807.859993] dump_stack_lvl+0x8b/0xb3 [ 807.860528] should_fail.cold+0x5/0xa [ 807.865072] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 807.865993] should_failslab+0x5/0x10 [ 807.866536] __kmalloc+0x72/0x440 [ 807.867032] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.867749] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 807.868627] genl_family_rcv_msg_doit+0xda/0x330 [ 807.869285] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 807.870120] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.870888] ? cap_capable+0x1eb/0x250 [ 807.871449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.872163] ? security_capable+0x95/0xc0 [ 807.872744] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.873523] ? ns_capable+0xd9/0x100 [ 807.874070] genl_rcv_msg+0x33c/0x5a0 [ 807.874612] ? genl_get_cmd+0x480/0x480 [ 807.875161] ? nl80211_set_channel+0x70/0x70 [ 807.875782] ? lock_release+0x750/0x750 [ 807.876359] netlink_rcv_skb+0x14b/0x430 [ 807.876944] ? genl_get_cmd+0x480/0x480 [ 807.877493] ? netlink_ack+0xa80/0xa80 [ 807.878010] ? netlink_deliver_tap+0x1b2/0xc30 [ 807.878588] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 807.879219] ? is_vmalloc_addr+0x7b/0xb0 [ 807.879747] genl_rcv+0x24/0x40 [ 807.880179] netlink_unicast+0x54a/0x800 [ 807.880705] ? netlink_attachskb+0x880/0x880 [ 807.881333] ? is_vmalloc_addr+0x7b/0xb0 [ 807.881925] netlink_sendmsg+0x904/0xe00 [ 807.882518] ? netlink_unicast+0x800/0x800 [ 807.883116] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.883890] ? netlink_unicast+0x800/0x800 [ 807.884492] sock_sendmsg+0x150/0x190 [ 807.885061] ____sys_sendmsg+0x703/0x870 [ 807.885618] ? kernel_sendmsg+0x50/0x50 [ 807.886169] ? __ia32_sys_recvmmsg+0x260/0x260 [ 807.886799] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 807.887525] ? lock_release+0x3b2/0x750 [ 807.888087] ___sys_sendmsg+0xf3/0x170 [ 807.888632] ? sendmsg_copy_msghdr+0x160/0x160 [ 807.889284] ? lock_release+0x3b2/0x750 [ 807.889830] ? lock_downgrade+0x6d0/0x6d0 [ 807.890390] ? lock_release+0x3b2/0x750 [ 807.890936] ? ksys_write+0x20c/0x250 [ 807.891462] ? lock_downgrade+0x6d0/0x6d0 [ 807.892035] ? __fget_files+0x287/0x470 [ 807.892603] ? __fget_light+0xea/0x270 [ 807.893160] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 807.893928] __sys_sendmsg+0xe5/0x1b0 [ 807.894423] ? __sys_sendmsg_sock+0x30/0x30 [ 807.894968] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 807.895673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 807.896339] do_syscall_64+0x3b/0x90 [ 807.896844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.897497] RIP: 0033:0x7f094bc34b19 [ 807.897959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.900209] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.901182] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 807.902139] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 807.903095] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.904049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.905042] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 807.907040] 00:15:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000fddda786adff1800000000000000df"]) [ 807.971014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:15:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 9) 00:15:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '('}, {0x20, ':]['}, {0x20, '.-\'^'}, {0x20, '-\'F&+*-{)'}, {}, {0x20, '('}], 0xa, "5d0ec0e714fcda7d729966a400e1266a3a33a485163dbd2f2accec7765a503f2e0ba262ded1b39a88015b69c61901141b38bae0dfe4dba4d3be7c4cee0821b440c82203b0010be214212479d4ad2c0ef6a4641c796"}, 0x78) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:15:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 5) [ 808.114012] FAULT_INJECTION: forcing a failure. [ 808.114012] name failslab, interval 1, probability 0, space 0, times 0 [ 808.117696] CPU: 1 PID: 6369 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220407 #1 [ 808.120273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 808.123930] Call Trace: [ 808.124817] [ 808.125590] dump_stack_lvl+0x8b/0xb3 [ 808.126839] should_fail.cold+0x5/0xa [ 808.128060] ? create_object.isra.0+0x3a/0xa20 [ 808.129525] should_failslab+0x5/0x10 [ 808.130743] kmem_cache_alloc+0x5b/0x480 [ 808.132070] create_object.isra.0+0x3a/0xa20 [ 808.133553] ? kasan_unpoison+0x23/0x50 [ 808.134787] __kmalloc+0x25b/0x440 [ 808.135916] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 808.138001] genl_family_rcv_msg_doit+0xda/0x330 [ 808.139491] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 808.141781] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.143529] ? cap_capable+0x1eb/0x250 [ 808.144678] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.146361] ? security_capable+0x95/0xc0 [ 808.147577] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.149223] ? ns_capable+0xd9/0x100 [ 808.150211] genl_rcv_msg+0x33c/0x5a0 [ 808.151258] ? genl_get_cmd+0x480/0x480 [ 808.152380] ? nl80211_set_channel+0x70/0x70 [ 808.153770] ? lock_release+0x750/0x750 [ 808.154967] netlink_rcv_skb+0x14b/0x430 [ 808.156235] ? genl_get_cmd+0x480/0x480 [ 808.157327] ? netlink_ack+0xa80/0xa80 [ 808.158384] ? netlink_deliver_tap+0x1b2/0xc30 [ 808.159781] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 808.160430] ? is_vmalloc_addr+0x7b/0xb0 [ 808.161280] genl_rcv+0x24/0x40 [ 808.162216] netlink_unicast+0x54a/0x800 [ 808.163377] ? netlink_attachskb+0x880/0x880 [ 808.164640] ? is_vmalloc_addr+0x7b/0xb0 [ 808.165834] netlink_sendmsg+0x904/0xe00 [ 808.167001] ? netlink_unicast+0x800/0x800 [ 808.168270] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.169860] ? netlink_unicast+0x800/0x800 [ 808.171091] sock_sendmsg+0x150/0x190 [ 808.172210] ____sys_sendmsg+0x703/0x870 [ 808.173395] ? kernel_sendmsg+0x50/0x50 [ 808.174527] ? __ia32_sys_recvmmsg+0x260/0x260 [ 808.175864] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 808.177433] ? lock_release+0x3b2/0x750 [ 808.178578] ___sys_sendmsg+0xf3/0x170 [ 808.179632] ? sendmsg_copy_msghdr+0x160/0x160 [ 808.180952] ? lock_release+0x3b2/0x750 [ 808.182091] ? lock_downgrade+0x6d0/0x6d0 [ 808.183277] ? lock_release+0x3b2/0x750 [ 808.184412] ? ksys_write+0x20c/0x250 [ 808.185571] ? lock_downgrade+0x6d0/0x6d0 [ 808.186770] ? __fget_files+0x287/0x470 [ 808.187927] ? __fget_light+0xea/0x270 [ 808.189050] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 808.190635] __sys_sendmsg+0xe5/0x1b0 [ 808.191905] ? __sys_sendmsg_sock+0x30/0x30 [ 808.193231] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.194794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 808.196283] do_syscall_64+0x3b/0x90 [ 808.197384] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 808.198878] RIP: 0033:0x7f066655fb19 [ 808.199970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.202845] RSP: 002b:00007f0663ad5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.203841] RAX: ffffffffffffffda RBX: 00007f0666672f60 RCX: 00007f066655fb19 [ 808.204763] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 808.205703] RBP: 00007f0663ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.206650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.207604] R13: 00007ffe1e4b661f R14: 00007f0663ad5300 R15: 0000000000022000 [ 808.208571] [ 808.209344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 808.261935] FAULT_INJECTION: forcing a failure. [ 808.261935] name failslab, interval 1, probability 0, space 0, times 0 [ 808.263435] CPU: 0 PID: 6376 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 808.264466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 808.266031] Call Trace: [ 808.266811] [ 808.267382] dump_stack_lvl+0x8b/0xb3 [ 808.268339] should_fail.cold+0x5/0xa [ 808.269127] should_failslab+0x5/0x10 [ 808.270157] __kmalloc_node_track_caller+0x7e/0x440 [ 808.271532] ? netlink_sendmsg+0x98d/0xe00 [ 808.272629] __alloc_skb+0xe3/0x340 [ 808.273745] netlink_sendmsg+0x98d/0xe00 [ 808.274847] ? netlink_unicast+0x800/0x800 [ 808.276022] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.277804] ? netlink_unicast+0x800/0x800 [ 808.279195] sock_sendmsg+0x150/0x190 [ 808.280253] ____sys_sendmsg+0x703/0x870 [ 808.281537] ? kernel_sendmsg+0x50/0x50 [ 808.282632] ? __ia32_sys_recvmmsg+0x260/0x260 [ 808.283825] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 808.285432] ? lock_release+0x3b2/0x750 [ 808.286589] ___sys_sendmsg+0xf3/0x170 [ 808.287604] ? sendmsg_copy_msghdr+0x160/0x160 [ 808.288840] ? lock_release+0x3b2/0x750 [ 808.289411] ? lock_downgrade+0x6d0/0x6d0 [ 808.289971] ? lock_release+0x3b2/0x750 [ 808.290518] ? ksys_write+0x20c/0x250 [ 808.291023] ? lock_downgrade+0x6d0/0x6d0 [ 808.291575] ? __fget_files+0x287/0x470 [ 808.292102] ? __fget_light+0xea/0x270 [ 808.292613] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 808.297470] __sys_sendmsg+0xe5/0x1b0 [ 808.298006] ? __sys_sendmsg_sock+0x30/0x30 [ 808.298555] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.299269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 808.299926] do_syscall_64+0x3b/0x90 [ 808.300427] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 808.301176] RIP: 0033:0x7efdda772b19 [ 808.301658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.304067] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.305139] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 808.306051] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 808.306951] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.307851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.308757] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 808.309765] [ 810.813005] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 810.815059] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 810.821724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 810.824662] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 810.826952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 810.829261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 810.862443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 810.863997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 810.865481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 810.867064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 810.869514] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 810.872480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 812.912230] Bluetooth: hci0: command 0x0409 tx timeout [ 814.959185] Bluetooth: hci0: command 0x041b tx timeout [ 817.009188] Bluetooth: hci0: command 0x040f tx timeout [ 819.055199] Bluetooth: hci0: command 0x0419 tx timeout [ 820.258411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.259713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.262289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.333269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.334444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.336677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:15:32 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x303620, 0x3d) bind$bt_sco(r1, &(0x7f0000001500)={0x1f, @none}, 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc3}) listen(r0, 0x0) fcntl$getflags(r2, 0x401) shutdown(r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001540)={[0x3]}, 0x8) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000471e44c50000000010000002000000", @ANYRES32=r6, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000380), 0xc, &(0x7f0000001440)={&(0x7f00000027c0)=ANY=[@ANYBLOB="d883152600eff50fffc0380000001b0a010f8b86d579abad54b8dbbc9e171acb35bd4de12d4c860a21124752303546e9e09ea076dcc8126423979336065b358da45f68e71cf1efdc81bd92efcd31d0b36e701ce9335cc7762396a9ceede1d81ae1b7ca7bcc0207678a2d61c2a51ae19e6f4e57ee78bf0327a4723f4d33a695e5bf5fe410f1436b4ff0ba435fa1693698f0e954fe9e89b8fa3dcf1461ee601909508c1dfef927de039a2f5c0581f679d646a204f44ff2f72fceee9a199d939cb57690571da2564020cd292f976847b85c94848fb848f1d5aeccd287d09a99b076e9ceb3b8938327ba8c13e8c5c644", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0c009900544b00002500000006003600120000000600360041000000de86e3c13abf8b0e918aff9b0fed4eed7ca26ba5d9df11e1df71c13da60b2254f6d3db4f2281763da463bca775044d47bd43460de9ed85793b8220d9fc6f96cec7215728a5680c3b"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000040)=""/182, 0xb6}, {&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x5) poll(&(0x7f0000000400)=[{r0, 0x7204}, {r2, 0x3}], 0x2, 0xfffffffe) 00:15:32 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) io_uring_enter(r5, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x300, 0x0, 0x37) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:15:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 6) 00:15:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 10) 00:15:32 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '('}, {0x20, ':]['}, {0x20, '.-\'^'}, {0x20, '-\'F&+*-{)'}, {}, {0x20, '('}], 0xa, "5d0ec0e714fcda7d729966a400e1266a3a33a485163dbd2f2accec7765a503f2e0ba262ded1b39a88015b69c61901141b38bae0dfe4dba4d3be7c4cee0821b440c82203b0010be214212479d4ad2c0ef6a4641c796"}, 0x78) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:15:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:15:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000fddda786adff1800000000000000df"]) 00:15:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 9) [ 836.142631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 836.150494] FAULT_INJECTION: forcing a failure. [ 836.150494] name failslab, interval 1, probability 0, space 0, times 0 [ 836.152139] CPU: 1 PID: 6857 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 836.153199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.154766] Call Trace: [ 836.155103] [ 836.155390] dump_stack_lvl+0x8b/0xb3 [ 836.155913] should_fail.cold+0x5/0xa [ 836.156426] ? create_object.isra.0+0x3a/0xa20 [ 836.157043] should_failslab+0x5/0x10 [ 836.157637] kmem_cache_alloc+0x5b/0x480 [ 836.158198] create_object.isra.0+0x3a/0xa20 [ 836.158792] ? kasan_unpoison+0x23/0x50 [ 836.159315] __kmalloc+0x25b/0x440 [ 836.159796] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 836.160681] genl_family_rcv_msg_doit+0xda/0x330 [ 836.161347] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 836.162237] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.162954] ? cap_capable+0x1eb/0x250 [ 836.163486] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.164210] ? security_capable+0x95/0xc0 [ 836.164748] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.165554] ? ns_capable+0xd9/0x100 [ 836.166078] genl_rcv_msg+0x33c/0x5a0 [ 836.166627] ? genl_get_cmd+0x480/0x480 [ 836.167161] ? nl80211_set_channel+0x70/0x70 [ 836.167761] ? lock_release+0x750/0x750 [ 836.168304] netlink_rcv_skb+0x14b/0x430 00:15:32 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) io_uring_enter(r5, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x300, 0x0, 0x37) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) [ 836.168860] ? genl_get_cmd+0x480/0x480 [ 836.169462] ? netlink_ack+0xa80/0xa80 [ 836.170022] ? netlink_deliver_tap+0x1b2/0xc30 [ 836.170644] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 836.171321] ? is_vmalloc_addr+0x7b/0xb0 [ 836.171883] genl_rcv+0x24/0x40 [ 836.172347] netlink_unicast+0x54a/0x800 [ 836.172927] ? netlink_attachskb+0x880/0x880 [ 836.173574] ? is_vmalloc_addr+0x7b/0xb0 [ 836.181705] netlink_sendmsg+0x904/0xe00 [ 836.182285] ? netlink_unicast+0x800/0x800 [ 836.182863] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.183591] ? netlink_unicast+0x800/0x800 [ 836.184175] sock_sendmsg+0x150/0x190 [ 836.184714] ____sys_sendmsg+0x703/0x870 [ 836.185301] ? kernel_sendmsg+0x50/0x50 [ 836.185829] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.186461] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 836.187179] ? lock_release+0x3b2/0x750 [ 836.187747] ___sys_sendmsg+0xf3/0x170 [ 836.188295] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.188930] ? lock_release+0x3b2/0x750 [ 836.189524] ? lock_downgrade+0x6d0/0x6d0 [ 836.190096] ? lock_release+0x3b2/0x750 [ 836.190652] ? ksys_write+0x20c/0x250 [ 836.191160] ? lock_downgrade+0x6d0/0x6d0 [ 836.191730] ? __fget_files+0x287/0x470 [ 836.192281] ? __fget_light+0xea/0x270 [ 836.192820] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 836.193593] __sys_sendmsg+0xe5/0x1b0 [ 836.194116] ? __sys_sendmsg_sock+0x30/0x30 [ 836.194695] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.195476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.196215] do_syscall_64+0x3b/0x90 [ 836.196753] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.197528] RIP: 0033:0x7f094bc34b19 [ 836.198044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.200491] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.201547] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 836.202484] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 836.203420] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.204370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.205354] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 836.206298] [ 836.206861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 836.227800] FAULT_INJECTION: forcing a failure. [ 836.227800] name failslab, interval 1, probability 0, space 0, times 0 [ 836.229442] CPU: 1 PID: 6854 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220407 #1 [ 836.230496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.231940] Call Trace: [ 836.232284] [ 836.232584] dump_stack_lvl+0x8b/0xb3 [ 836.233093] should_fail.cold+0x5/0xa [ 836.233615] ? __alloc_skb+0x211/0x340 [ 836.234118] should_failslab+0x5/0x10 [ 836.234618] kmem_cache_alloc_node+0x55/0x490 [ 836.235197] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.235952] __alloc_skb+0x211/0x340 [ 836.236436] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 836.237407] netlink_ack+0x1f0/0xa80 [ 836.238229] ? nl80211_set_channel+0x70/0x70 [ 836.238824] ? netlink_sendmsg+0xe00/0xe00 [ 836.239850] ? lock_release+0x750/0x750 [ 836.241104] netlink_rcv_skb+0x348/0x430 [ 836.242407] ? genl_get_cmd+0x480/0x480 [ 836.243494] ? netlink_ack+0xa80/0xa80 [ 836.244593] ? netlink_deliver_tap+0x1b2/0xc30 [ 836.245806] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 836.247009] ? is_vmalloc_addr+0x7b/0xb0 [ 836.247931] genl_rcv+0x24/0x40 [ 836.248720] netlink_unicast+0x54a/0x800 [ 836.249555] ? netlink_attachskb+0x880/0x880 [ 836.250148] ? is_vmalloc_addr+0x7b/0xb0 [ 836.250704] netlink_sendmsg+0x904/0xe00 [ 836.251275] ? netlink_unicast+0x800/0x800 [ 836.251864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.252601] ? netlink_unicast+0x800/0x800 [ 836.253161] sock_sendmsg+0x150/0x190 [ 836.253763] ____sys_sendmsg+0x703/0x870 [ 836.254299] ? kernel_sendmsg+0x50/0x50 [ 836.254843] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.255469] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 836.256196] ? lock_release+0x3b2/0x750 [ 836.256751] ___sys_sendmsg+0xf3/0x170 [ 836.257382] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.258016] ? lock_release+0x3b2/0x750 [ 836.258565] ? lock_downgrade+0x6d0/0x6d0 [ 836.261509] ? lock_release+0x3b2/0x750 [ 836.266449] ? ksys_write+0x20c/0x250 [ 836.266973] ? lock_downgrade+0x6d0/0x6d0 [ 836.267522] ? __fget_files+0x287/0x470 [ 836.268068] ? __fget_light+0xea/0x270 [ 836.268599] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 836.269504] __sys_sendmsg+0xe5/0x1b0 [ 836.270505] ? __sys_sendmsg_sock+0x30/0x30 [ 836.271657] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.273088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.273889] do_syscall_64+0x3b/0x90 [ 836.274391] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.275080] RIP: 0033:0x7f066655fb19 [ 836.275574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.279213] RSP: 002b:00007f0663ad5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.280221] RAX: ffffffffffffffda RBX: 00007f0666672f60 RCX: 00007f066655fb19 [ 836.281147] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 836.283357] RBP: 00007f0663ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.285304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.287041] R13: 00007ffe1e4b661f R14: 00007f0663ad5300 R15: 0000000000022000 [ 836.288907] [ 836.303388] FAULT_INJECTION: forcing a failure. [ 836.303388] name failslab, interval 1, probability 0, space 0, times 0 [ 836.305832] CPU: 0 PID: 6863 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 836.307258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.309098] Call Trace: [ 836.309499] [ 836.309880] dump_stack_lvl+0x8b/0xb3 [ 836.310464] should_fail.cold+0x5/0xa [ 836.311170] ? create_object.isra.0+0x3a/0xa20 [ 836.311941] should_failslab+0x5/0x10 [ 836.312524] kmem_cache_alloc+0x5b/0x480 [ 836.313202] create_object.isra.0+0x3a/0xa20 [ 836.314045] ? kasan_unpoison+0x23/0x50 [ 836.314797] __kmalloc_node_track_caller+0x269/0x440 [ 836.315615] ? netlink_sendmsg+0x98d/0xe00 [ 836.316289] __alloc_skb+0xe3/0x340 [ 836.316906] netlink_sendmsg+0x98d/0xe00 [ 836.317484] ? netlink_unicast+0x800/0x800 [ 836.318073] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.319005] ? netlink_unicast+0x800/0x800 [ 836.319596] sock_sendmsg+0x150/0x190 [ 836.320097] ____sys_sendmsg+0x703/0x870 [ 836.320733] ? kernel_sendmsg+0x50/0x50 [ 836.321270] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.321970] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 836.322751] ? lock_release+0x3b2/0x750 [ 836.323274] ___sys_sendmsg+0xf3/0x170 [ 836.323843] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.324433] ? lock_release+0x3b2/0x750 [ 836.325015] ? lock_downgrade+0x6d0/0x6d0 [ 836.325665] ? lock_release+0x3b2/0x750 [ 836.326184] ? ksys_write+0x20c/0x250 [ 836.326747] ? lock_downgrade+0x6d0/0x6d0 [ 836.327298] ? __fget_files+0x287/0x470 [ 836.327896] ? __fget_light+0xea/0x270 [ 836.328420] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 836.329205] __sys_sendmsg+0xe5/0x1b0 [ 836.329831] ? __sys_sendmsg_sock+0x30/0x30 [ 836.330411] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.331265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.332040] do_syscall_64+0x3b/0x90 [ 836.332593] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.333360] RIP: 0033:0x7efdda772b19 [ 836.333945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.336527] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.337907] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 836.338896] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 836.339870] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.340852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.341846] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 836.342903] 00:15:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 836.354711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:15:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 7) 00:15:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 10) 00:15:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 11) [ 836.490158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 836.491720] FAULT_INJECTION: forcing a failure. [ 836.491720] name failslab, interval 1, probability 0, space 0, times 0 [ 836.493351] CPU: 1 PID: 6877 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 836.494464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.495963] Call Trace: [ 836.496307] [ 836.496602] dump_stack_lvl+0x8b/0xb3 [ 836.497131] should_fail.cold+0x5/0xa [ 836.497687] ? __alloc_skb+0x211/0x340 [ 836.498218] should_failslab+0x5/0x10 [ 836.498704] kmem_cache_alloc_node+0x55/0x490 [ 836.499263] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.499975] __alloc_skb+0x211/0x340 [ 836.500481] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 836.501266] netlink_ack+0x1f0/0xa80 [ 836.501793] ? nl80211_set_channel+0x70/0x70 [ 836.502419] ? netlink_sendmsg+0xe00/0xe00 [ 836.502992] ? lock_release+0x750/0x750 [ 836.503513] ? io_schedule_timeout+0x140/0x140 [ 836.504124] netlink_rcv_skb+0x348/0x430 [ 836.504669] ? genl_get_cmd+0x480/0x480 [ 836.505188] ? netlink_ack+0xa80/0xa80 [ 836.505740] ? netlink_deliver_tap+0x1b2/0xc30 [ 836.506314] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 836.506958] ? is_vmalloc_addr+0x7b/0xb0 [ 836.507509] genl_rcv+0x24/0x40 [ 836.507970] netlink_unicast+0x54a/0x800 [ 836.508530] ? netlink_attachskb+0x880/0x880 [ 836.509130] ? is_vmalloc_addr+0x7b/0xb0 [ 836.509752] netlink_sendmsg+0x904/0xe00 [ 836.510318] ? netlink_unicast+0x800/0x800 [ 836.510901] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.511643] ? netlink_unicast+0x800/0x800 [ 836.512283] sock_sendmsg+0x150/0x190 [ 836.512807] ____sys_sendmsg+0x703/0x870 [ 836.513420] ? kernel_sendmsg+0x50/0x50 [ 836.513946] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.514560] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 836.515268] ? lock_release+0x3b2/0x750 [ 836.515826] ___sys_sendmsg+0xf3/0x170 [ 836.516362] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.516981] ? lock_release+0x3b2/0x750 [ 836.517599] ? lock_downgrade+0x6d0/0x6d0 [ 836.518187] ? lock_release+0x3b2/0x750 [ 836.518721] ? ksys_write+0x20c/0x250 [ 836.519228] ? lock_downgrade+0x6d0/0x6d0 [ 836.519776] ? __fget_files+0x287/0x470 [ 836.520327] ? __fget_light+0xea/0x270 [ 836.520866] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 836.521670] __sys_sendmsg+0xe5/0x1b0 [ 836.522184] ? __sys_sendmsg_sock+0x30/0x30 [ 836.522756] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.523519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.524225] do_syscall_64+0x3b/0x90 [ 836.524744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.525481] RIP: 0033:0x7f094bc34b19 [ 836.525982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.528451] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.529512] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 836.530444] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 836.531369] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.532308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.533275] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 836.534270] [ 836.543856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 836.548907] FAULT_INJECTION: forcing a failure. [ 836.548907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.550675] CPU: 0 PID: 6880 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 836.551790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.554163] Call Trace: [ 836.554486] [ 836.554817] dump_stack_lvl+0x8b/0xb3 [ 836.555296] should_fail.cold+0x5/0xa [ 836.555895] _copy_from_iter+0x37d/0x14d0 [ 836.556446] ? _copy_from_iter_nocache+0x14a0/0x14a0 [ 836.557243] ? rcu_read_lock_sched_held+0x3a/0x70 [ 836.557941] ? memset+0x20/0x40 [ 836.558405] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 836.561923] ? __virt_addr_valid+0xe9/0x350 [ 836.562518] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 836.563175] ? is_vmalloc_addr+0x7b/0xb0 [ 836.563725] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 836.564449] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 836.565092] ? __check_object_size+0x1b5/0x890 [ 836.565757] netlink_sendmsg+0x86b/0xe00 [ 836.566394] ? netlink_unicast+0x800/0x800 [ 836.567044] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.567888] ? netlink_unicast+0x800/0x800 [ 836.568563] sock_sendmsg+0x150/0x190 [ 836.569149] ____sys_sendmsg+0x703/0x870 [ 836.571231] FAULT_INJECTION: forcing a failure. [ 836.571231] name failslab, interval 1, probability 0, space 0, times 0 [ 836.573820] ? kernel_sendmsg+0x50/0x50 [ 836.573855] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.577955] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 836.578642] ? lock_release+0x3b2/0x750 [ 836.579175] ___sys_sendmsg+0xf3/0x170 [ 836.579699] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.580288] ? lock_release+0x3b2/0x750 [ 836.580809] ? lock_downgrade+0x6d0/0x6d0 [ 836.581387] ? lock_release+0x3b2/0x750 [ 836.581912] ? ksys_write+0x20c/0x250 [ 836.582447] ? lock_downgrade+0x6d0/0x6d0 [ 836.582994] ? __fget_files+0x287/0x470 [ 836.583538] ? __fget_light+0xea/0x270 [ 836.584063] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 836.584789] __sys_sendmsg+0xe5/0x1b0 [ 836.585320] ? __sys_sendmsg_sock+0x30/0x30 [ 836.585877] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.586651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.587326] do_syscall_64+0x3b/0x90 [ 836.587802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.588441] RIP: 0033:0x7efdda772b19 [ 836.588893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.591385] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.592440] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 836.593460] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 836.594443] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.595397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.596251] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 836.597151] [ 836.597511] CPU: 1 PID: 6879 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220407 #1 [ 836.598885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.600370] Call Trace: [ 836.600713] [ 836.601021] dump_stack_lvl+0x8b/0xb3 [ 836.601627] should_fail.cold+0x5/0xa [ 836.602138] ? create_object.isra.0+0x3a/0xa20 [ 836.602755] should_failslab+0x5/0x10 [ 836.603273] kmem_cache_alloc+0x5b/0x480 [ 836.603842] create_object.isra.0+0x3a/0xa20 [ 836.604427] ? kasan_unpoison+0x23/0x50 [ 836.604967] kmem_cache_alloc_node+0x248/0x490 [ 836.605657] __alloc_skb+0x211/0x340 [ 836.606229] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 836.607062] netlink_ack+0x1f0/0xa80 [ 836.607650] ? nl80211_set_channel+0x70/0x70 [ 836.608323] ? netlink_sendmsg+0xe00/0xe00 [ 836.608973] ? lock_release+0x750/0x750 [ 836.609598] netlink_rcv_skb+0x348/0x430 [ 836.610219] ? genl_get_cmd+0x480/0x480 [ 836.610806] ? netlink_ack+0xa80/0xa80 [ 836.611411] ? netlink_deliver_tap+0x1b2/0xc30 [ 836.612105] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 836.612891] ? is_vmalloc_addr+0x7b/0xb0 [ 836.613542] genl_rcv+0x24/0x40 [ 836.614047] netlink_unicast+0x54a/0x800 [ 836.614680] ? netlink_attachskb+0x880/0x880 [ 836.615353] ? is_vmalloc_addr+0x7b/0xb0 [ 836.615990] netlink_sendmsg+0x904/0xe00 [ 836.616623] ? netlink_unicast+0x800/0x800 [ 836.617287] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.618118] ? netlink_unicast+0x800/0x800 [ 836.621614] sock_sendmsg+0x150/0x190 [ 836.622930] ____sys_sendmsg+0x703/0x870 [ 836.623597] ? kernel_sendmsg+0x50/0x50 [ 836.624811] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.625586] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 836.627234] ? lock_release+0x3b2/0x750 [ 836.628583] ___sys_sendmsg+0xf3/0x170 [ 836.629891] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.631408] ? lock_release+0x3b2/0x750 [ 836.632731] ? lock_downgrade+0x6d0/0x6d0 [ 836.634102] ? lock_release+0x3b2/0x750 [ 836.635374] ? ksys_write+0x20c/0x250 [ 836.636611] ? lock_downgrade+0x6d0/0x6d0 [ 836.637975] ? __fget_files+0x287/0x470 [ 836.639265] ? __fget_light+0xea/0x270 [ 836.640557] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 836.642382] __sys_sendmsg+0xe5/0x1b0 [ 836.643633] ? __sys_sendmsg_sock+0x30/0x30 [ 836.644984] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.646922] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.648687] do_syscall_64+0x3b/0x90 [ 836.650041] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.651861] RIP: 0033:0x7f066655fb19 [ 836.653100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.659222] RSP: 002b:00007f0663ad5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.661726] RAX: ffffffffffffffda RBX: 00007f0666672f60 RCX: 00007f066655fb19 [ 836.663968] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 836.666316] RBP: 00007f0663ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.668614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.670889] R13: 00007ffe1e4b661f R14: 00007f0663ad5300 R15: 0000000000022000 [ 836.673247] 00:15:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 11) [ 836.746381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 836.749311] FAULT_INJECTION: forcing a failure. [ 836.749311] name failslab, interval 1, probability 0, space 0, times 0 [ 836.757040] CPU: 1 PID: 6883 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 836.759736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.763112] Call Trace: [ 836.763953] [ 836.764691] dump_stack_lvl+0x8b/0xb3 [ 836.773650] should_fail.cold+0x5/0xa [ 836.774776] ? __alloc_skb+0x211/0x340 [ 836.776012] should_failslab+0x5/0x10 [ 836.777208] kmem_cache_alloc_node+0x55/0x490 [ 836.778783] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.783006] __alloc_skb+0x211/0x340 [ 836.784355] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 836.786291] netlink_ack+0x1f0/0xa80 [ 836.787645] ? nl80211_set_channel+0x70/0x70 [ 836.789361] ? netlink_sendmsg+0xe00/0xe00 [ 836.802367] ? lock_release+0x750/0x750 [ 836.803808] netlink_rcv_skb+0x348/0x430 [ 836.805338] ? genl_get_cmd+0x480/0x480 [ 836.806762] ? netlink_ack+0xa80/0xa80 [ 836.808195] ? netlink_deliver_tap+0x1b2/0xc30 [ 836.809913] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 836.811670] ? is_vmalloc_addr+0x7b/0xb0 [ 836.813088] genl_rcv+0x24/0x40 [ 836.825327] netlink_unicast+0x54a/0x800 [ 836.826876] ? netlink_attachskb+0x880/0x880 [ 836.828415] ? is_vmalloc_addr+0x7b/0xb0 [ 836.829905] netlink_sendmsg+0x904/0xe00 [ 836.831370] ? netlink_unicast+0x800/0x800 [ 836.832935] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.834839] ? netlink_unicast+0x800/0x800 [ 836.836380] sock_sendmsg+0x150/0x190 [ 836.837779] ____sys_sendmsg+0x703/0x870 [ 836.839214] ? kernel_sendmsg+0x50/0x50 [ 836.840625] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.842330] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 836.853434] ? lock_release+0x3b2/0x750 [ 836.854031] ___sys_sendmsg+0xf3/0x170 [ 836.854566] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.855315] ? lock_release+0x3b2/0x750 [ 836.855847] ? lock_downgrade+0x6d0/0x6d0 [ 836.856395] ? lock_release+0x3b2/0x750 [ 836.856918] ? ksys_write+0x20c/0x250 [ 836.857456] ? lock_downgrade+0x6d0/0x6d0 [ 836.858056] ? __fget_files+0x287/0x470 [ 836.858606] ? __fget_light+0xea/0x270 [ 836.859132] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 836.859889] __sys_sendmsg+0xe5/0x1b0 [ 836.860415] ? __sys_sendmsg_sock+0x30/0x30 [ 836.861000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.865850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.866585] do_syscall_64+0x3b/0x90 [ 836.877391] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.878115] RIP: 0033:0x7f094bc34b19 [ 836.878614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.880896] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.881973] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 836.882926] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 836.883893] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 00:15:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:15:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 12) [ 836.884858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.889891] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 836.890866] [ 837.110525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 837.129914] FAULT_INJECTION: forcing a failure. [ 837.129914] name failslab, interval 1, probability 0, space 0, times 0 [ 837.131568] CPU: 0 PID: 6891 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220407 #1 [ 837.132699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 837.138228] Call Trace: [ 837.138588] [ 837.138891] dump_stack_lvl+0x8b/0xb3 [ 837.139414] should_fail.cold+0x5/0xa [ 837.139933] should_failslab+0x5/0x10 [ 837.140452] __kmalloc_node_track_caller+0x7e/0x440 [ 837.141134] ? netlink_ack+0x1f0/0xa80 [ 837.141707] __alloc_skb+0xe3/0x340 [ 837.142217] netlink_ack+0x1f0/0xa80 [ 837.142739] ? nl80211_set_channel+0x70/0x70 [ 837.143340] ? netlink_sendmsg+0xe00/0xe00 [ 837.143924] ? lock_release+0x750/0x750 [ 837.144491] netlink_rcv_skb+0x348/0x430 [ 837.145013] ? genl_get_cmd+0x480/0x480 [ 837.145555] ? netlink_ack+0xa80/0xa80 [ 837.146062] ? netlink_deliver_tap+0x1b2/0xc30 [ 837.146702] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 837.147358] ? is_vmalloc_addr+0x7b/0xb0 [ 837.147913] genl_rcv+0x24/0x40 [ 837.148407] netlink_unicast+0x54a/0x800 [ 837.148963] ? netlink_attachskb+0x880/0x880 [ 837.149611] ? is_vmalloc_addr+0x7b/0xb0 [ 837.150163] netlink_sendmsg+0x904/0xe00 [ 837.150728] ? netlink_unicast+0x800/0x800 [ 837.151314] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 837.152053] ? netlink_unicast+0x800/0x800 [ 837.152674] sock_sendmsg+0x150/0x190 [ 837.153199] ____sys_sendmsg+0x703/0x870 [ 837.153804] ? kernel_sendmsg+0x50/0x50 [ 837.154344] ? __ia32_sys_recvmmsg+0x260/0x260 [ 837.154960] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 837.155665] ? lock_release+0x3b2/0x750 [ 837.156193] ___sys_sendmsg+0xf3/0x170 [ 837.156728] ? sendmsg_copy_msghdr+0x160/0x160 [ 837.157422] ? lock_release+0x3b2/0x750 [ 837.157960] ? lock_downgrade+0x6d0/0x6d0 [ 837.158538] ? lock_release+0x3b2/0x750 [ 837.159074] ? ksys_write+0x20c/0x250 [ 837.159592] ? lock_downgrade+0x6d0/0x6d0 [ 837.160158] ? __fget_files+0x287/0x470 [ 837.160759] ? __fget_light+0xea/0x270 [ 837.161312] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 837.162067] __sys_sendmsg+0xe5/0x1b0 [ 837.162596] ? __sys_sendmsg_sock+0x30/0x30 [ 837.163183] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 837.163948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 837.164643] do_syscall_64+0x3b/0x90 [ 837.165118] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 837.165834] RIP: 0033:0x7f066655fb19 [ 837.166316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 837.168910] RSP: 002b:00007f0663ad5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.169940] RAX: ffffffffffffffda RBX: 00007f0666672f60 RCX: 00007f066655fb19 [ 837.170863] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 837.171768] RBP: 00007f0663ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 837.172691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 837.173630] R13: 00007ffe1e4b661f R14: 00007f0663ad5300 R15: 0000000000022000 [ 837.174546] [ 852.043290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 852.051509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:15:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:15:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x0) bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0100020000002ebfb13361b37a66696c"]) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0xfdb3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x0, 0x0, 0xc3, 0x0, "b679875fe809a77d669771f9d003325146001ee5e175177feb998c9eaac8de59b88561aebf5cd5d2ba606b765ab364a3f197c183f4242c48bea90dc85bf7a959819b7acb6626ed9e00"}, 0xd8) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:15:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:15:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 8) 00:15:48 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r2}}, 0xa3) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) io_uring_enter(r4, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x300, 0x0, 0x37) 00:15:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 13) 00:15:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 12) 00:15:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) [ 852.081241] FAULT_INJECTION: forcing a failure. [ 852.081241] name failslab, interval 1, probability 0, space 0, times 0 [ 852.082567] CPU: 0 PID: 6902 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 852.083430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.084610] Call Trace: [ 852.084882] [ 852.085120] dump_stack_lvl+0x8b/0xb3 [ 852.085552] should_fail.cold+0x5/0xa [ 852.085959] ? create_object.isra.0+0x3a/0xa20 [ 852.086467] should_failslab+0x5/0x10 [ 852.086878] kmem_cache_alloc+0x5b/0x480 [ 852.087337] create_object.isra.0+0x3a/0xa20 [ 852.087810] ? kasan_unpoison+0x23/0x50 [ 852.088252] kmem_cache_alloc_node+0x248/0x490 [ 852.088751] __alloc_skb+0x211/0x340 [ 852.089164] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 852.089756] netlink_ack+0x1f0/0xa80 [ 852.090177] ? nl80211_set_channel+0x70/0x70 [ 852.090656] ? netlink_sendmsg+0xe00/0xe00 [ 852.091123] ? lock_release+0x750/0x750 [ 852.091566] netlink_rcv_skb+0x348/0x430 [ 852.092010] ? genl_get_cmd+0x480/0x480 [ 852.092448] ? netlink_ack+0xa80/0xa80 [ 852.092886] ? netlink_deliver_tap+0x1b2/0xc30 [ 852.093384] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 852.093955] ? is_vmalloc_addr+0x7b/0xb0 [ 852.094409] genl_rcv+0x24/0x40 [ 852.094771] netlink_unicast+0x54a/0x800 [ 852.095225] ? netlink_attachskb+0x880/0x880 [ 852.095705] ? is_vmalloc_addr+0x7b/0xb0 [ 852.096158] netlink_sendmsg+0x904/0xe00 [ 852.096610] ? netlink_unicast+0x800/0x800 [ 852.097077] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.097675] ? netlink_unicast+0x800/0x800 [ 852.098149] sock_sendmsg+0x150/0x190 [ 852.098573] ____sys_sendmsg+0x703/0x870 [ 852.099019] ? kernel_sendmsg+0x50/0x50 [ 852.099464] ? __ia32_sys_recvmmsg+0x260/0x260 [ 852.099967] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 852.100552] ? lock_release+0x3b2/0x750 [ 852.100985] ___sys_sendmsg+0xf3/0x170 [ 852.101410] ? sendmsg_copy_msghdr+0x160/0x160 [ 852.101907] ? lock_release+0x3b2/0x750 [ 852.102342] ? lock_downgrade+0x6d0/0x6d0 [ 852.102789] ? lock_release+0x3b2/0x750 [ 852.103221] ? ksys_write+0x20c/0x250 [ 852.103647] ? lock_downgrade+0x6d0/0x6d0 [ 852.104110] ? __fget_files+0x287/0x470 [ 852.104553] ? __fget_light+0xea/0x270 [ 852.104979] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 852.105608] __sys_sendmsg+0xe5/0x1b0 [ 852.106029] ? __sys_sendmsg_sock+0x30/0x30 [ 852.106503] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.107109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 852.107670] do_syscall_64+0x3b/0x90 [ 852.108077] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.108645] RIP: 0033:0x7f094bc34b19 [ 852.109041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.111022] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.111849] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 852.112628] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 852.113389] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 852.114175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.114943] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 852.115712] [ 852.116109] FAULT_INJECTION: forcing a failure. [ 852.116109] name failslab, interval 1, probability 0, space 0, times 0 [ 852.117292] CPU: 0 PID: 6899 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220407 #1 [ 852.118190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.119381] Call Trace: [ 852.119649] [ 852.119893] dump_stack_lvl+0x8b/0xb3 [ 852.120308] should_fail.cold+0x5/0xa [ 852.120722] ? create_object.isra.0+0x3a/0xa20 [ 852.121221] should_failslab+0x5/0x10 [ 852.121637] kmem_cache_alloc+0x5b/0x480 [ 852.122086] create_object.isra.0+0x3a/0xa20 [ 852.122566] ? kasan_unpoison+0x23/0x50 [ 852.122991] __kmalloc_node_track_caller+0x269/0x440 [ 852.123555] ? netlink_ack+0x1f0/0xa80 [ 852.123978] __alloc_skb+0xe3/0x340 [ 852.124391] netlink_ack+0x1f0/0xa80 [ 852.124799] ? nl80211_set_channel+0x70/0x70 [ 852.125288] ? netlink_sendmsg+0xe00/0xe00 [ 852.125761] ? lock_release+0x750/0x750 [ 852.126194] netlink_rcv_skb+0x348/0x430 [ 852.126653] ? genl_get_cmd+0x480/0x480 [ 852.127091] ? netlink_ack+0xa80/0xa80 [ 852.127530] ? netlink_deliver_tap+0x1b2/0xc30 [ 852.128034] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 852.128586] ? is_vmalloc_addr+0x7b/0xb0 [ 852.129032] genl_rcv+0x24/0x40 [ 852.129395] netlink_unicast+0x54a/0x800 [ 852.129852] ? netlink_attachskb+0x880/0x880 [ 852.130347] ? is_vmalloc_addr+0x7b/0xb0 [ 852.130796] netlink_sendmsg+0x904/0xe00 [ 852.131243] ? netlink_unicast+0x800/0x800 [ 852.131708] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.132317] ? netlink_unicast+0x800/0x800 [ 852.132774] sock_sendmsg+0x150/0x190 [ 852.133183] ____sys_sendmsg+0x703/0x870 [ 852.133628] ? kernel_sendmsg+0x50/0x50 [ 852.134068] ? __ia32_sys_recvmmsg+0x260/0x260 [ 852.134570] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 852.135138] ? lock_release+0x3b2/0x750 [ 852.135585] ___sys_sendmsg+0xf3/0x170 [ 852.136011] ? sendmsg_copy_msghdr+0x160/0x160 [ 852.136521] ? lock_release+0x3b2/0x750 [ 852.136951] ? lock_downgrade+0x6d0/0x6d0 [ 852.137405] ? lock_release+0x3b2/0x750 [ 852.137852] ? ksys_write+0x20c/0x250 [ 852.138279] ? lock_downgrade+0x6d0/0x6d0 [ 852.138739] ? __fget_files+0x287/0x470 [ 852.139193] ? __fget_light+0xea/0x270 [ 852.139629] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 852.140250] __sys_sendmsg+0xe5/0x1b0 [ 852.140665] ? __sys_sendmsg_sock+0x30/0x30 [ 852.141152] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.141791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 852.142373] do_syscall_64+0x3b/0x90 [ 852.142795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.143362] RIP: 0033:0x7f066655fb19 [ 852.143763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.145799] RSP: 002b:00007f0663ad5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.146634] RAX: ffffffffffffffda RBX: 00007f0666672f60 RCX: 00007f066655fb19 [ 852.147436] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 852.148220] RBP: 00007f0663ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 852.148972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.149765] R13: 00007ffe1e4b661f R14: 00007f0663ad5300 R15: 0000000000022000 [ 852.150533] [ 852.158808] FAULT_INJECTION: forcing a failure. [ 852.158808] name failslab, interval 1, probability 0, space 0, times 0 [ 852.160346] CPU: 0 PID: 6910 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 852.161286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.162578] Call Trace: [ 852.162858] [ 852.163113] dump_stack_lvl+0x8b/0xb3 [ 852.163534] should_fail.cold+0x5/0xa [ 852.163945] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 852.164651] should_failslab+0x5/0x10 [ 852.165068] __kmalloc+0x72/0x440 [ 852.165438] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.166041] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 852.166718] genl_family_rcv_msg_doit+0xda/0x330 [ 852.167227] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 852.167926] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.168513] ? cap_capable+0x1eb/0x250 [ 852.168938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.169558] ? security_capable+0x95/0xc0 [ 852.170003] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.170587] ? ns_capable+0xd9/0x100 [ 852.170999] genl_rcv_msg+0x33c/0x5a0 [ 852.171415] ? genl_get_cmd+0x480/0x480 [ 852.171831] ? nl80211_set_channel+0x70/0x70 [ 852.172321] ? lock_release+0x750/0x750 [ 852.172762] netlink_rcv_skb+0x14b/0x430 [ 852.173214] ? genl_get_cmd+0x480/0x480 [ 852.173646] ? netlink_ack+0xa80/0xa80 [ 852.174095] ? netlink_deliver_tap+0x1b2/0xc30 [ 852.174592] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 852.175147] ? is_vmalloc_addr+0x7b/0xb0 [ 852.175597] genl_rcv+0x24/0x40 [ 852.175963] netlink_unicast+0x54a/0x800 [ 852.176417] ? netlink_attachskb+0x880/0x880 [ 852.176907] ? is_vmalloc_addr+0x7b/0xb0 [ 852.177366] netlink_sendmsg+0x904/0xe00 [ 852.177813] ? netlink_unicast+0x800/0x800 [ 852.178299] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.178896] ? netlink_unicast+0x800/0x800 [ 852.179367] sock_sendmsg+0x150/0x190 [ 852.179775] ____sys_sendmsg+0x703/0x870 [ 852.180232] ? kernel_sendmsg+0x50/0x50 [ 852.180656] ? __ia32_sys_recvmmsg+0x260/0x260 [ 852.181174] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 852.181733] ? lock_release+0x3b2/0x750 [ 852.182177] ___sys_sendmsg+0xf3/0x170 [ 852.182593] ? sendmsg_copy_msghdr+0x160/0x160 [ 852.183111] ? lock_release+0x3b2/0x750 [ 852.183528] ? lock_downgrade+0x6d0/0x6d0 [ 852.183984] ? lock_release+0x3b2/0x750 [ 852.184402] ? ksys_write+0x20c/0x250 [ 852.184817] ? lock_downgrade+0x6d0/0x6d0 [ 852.185266] ? __fget_files+0x287/0x470 [ 852.185727] ? __fget_light+0xea/0x270 [ 852.186168] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 852.186789] __sys_sendmsg+0xe5/0x1b0 [ 852.187216] ? __sys_sendmsg_sock+0x30/0x30 [ 852.187701] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.188322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 852.188907] do_syscall_64+0x3b/0x90 [ 852.189306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.189882] RIP: 0033:0x7efdda772b19 [ 852.190283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.192286] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.193114] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 852.193904] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 852.194676] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 852.195454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.196240] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 852.197042] 00:16:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:16:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:16:01 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r2}}, 0xa3) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) io_uring_enter(r4, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x300, 0x0, 0x37) 00:16:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 13) 00:16:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2) shutdown(r0, 0x0) syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r8, 0x0, 0x0}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0x6, 0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r7, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x6, 0x0, @fd=r9, 0x7, 0x0, 0x80000000}, 0x80) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:16:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 14) 00:16:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 9) 00:16:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 864.448675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 864.450701] FAULT_INJECTION: forcing a failure. [ 864.450701] name failslab, interval 1, probability 0, space 0, times 0 [ 864.452410] CPU: 0 PID: 6932 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 864.453449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 864.454902] Call Trace: [ 864.455248] [ 864.455540] dump_stack_lvl+0x8b/0xb3 [ 864.456045] should_fail.cold+0x5/0xa [ 864.456555] ? create_object.isra.0+0x3a/0xa20 [ 864.457167] should_failslab+0x5/0x10 [ 864.457698] kmem_cache_alloc+0x5b/0x480 [ 864.458266] create_object.isra.0+0x3a/0xa20 [ 864.458847] ? kasan_unpoison+0x23/0x50 [ 864.459364] __kmalloc_node_track_caller+0x269/0x440 [ 864.460027] ? netlink_ack+0x1f0/0xa80 [ 864.460560] __alloc_skb+0xe3/0x340 [ 864.461058] netlink_ack+0x1f0/0xa80 [ 864.461573] ? nl80211_set_channel+0x70/0x70 [ 864.462212] ? netlink_sendmsg+0xe00/0xe00 [ 864.462754] ? lock_release+0x750/0x750 [ 864.463264] netlink_rcv_skb+0x348/0x430 [ 864.463788] ? genl_get_cmd+0x480/0x480 [ 864.464295] ? netlink_ack+0xa80/0xa80 [ 864.464808] ? netlink_deliver_tap+0x1b2/0xc30 [ 864.465391] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 864.466066] ? is_vmalloc_addr+0x7b/0xb0 [ 864.466593] genl_rcv+0x24/0x40 [ 864.467015] netlink_unicast+0x54a/0x800 [ 864.467544] ? netlink_attachskb+0x880/0x880 [ 864.468109] ? is_vmalloc_addr+0x7b/0xb0 [ 864.468647] netlink_sendmsg+0x904/0xe00 [ 864.469140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 864.469378] FAULT_INJECTION: forcing a failure. [ 864.469378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.470239] ? netlink_unicast+0x800/0x800 [ 864.470282] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 864.473523] ? netlink_unicast+0x800/0x800 [ 864.474137] sock_sendmsg+0x150/0x190 [ 864.474645] ____sys_sendmsg+0x703/0x870 [ 864.475181] ? kernel_sendmsg+0x50/0x50 [ 864.475702] ? __ia32_sys_recvmmsg+0x260/0x260 [ 864.476304] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 864.476998] ? lock_release+0x3b2/0x750 [ 864.477537] ___sys_sendmsg+0xf3/0x170 [ 864.478092] ? sendmsg_copy_msghdr+0x160/0x160 [ 864.478701] ? lock_release+0x3b2/0x750 [ 864.479239] ? lock_downgrade+0x6d0/0x6d0 [ 864.479780] ? lock_release+0x3b2/0x750 [ 864.480298] ? ksys_write+0x20c/0x250 [ 864.480802] ? lock_downgrade+0x6d0/0x6d0 [ 864.481359] ? __fget_files+0x287/0x470 [ 864.481957] ? __fget_light+0xea/0x270 [ 864.482483] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 864.483213] __sys_sendmsg+0xe5/0x1b0 [ 864.483729] ? __sys_sendmsg_sock+0x30/0x30 [ 864.484309] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 864.485045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.485750] do_syscall_64+0x3b/0x90 [ 864.486224] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 864.486877] RIP: 0033:0x7f094bc34b19 [ 864.487344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.489584] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.490590] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 864.491480] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 864.492364] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.493258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.494185] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 864.495113] [ 864.495421] CPU: 1 PID: 6933 Comm: syz-executor.2 Not tainted 5.18.0-rc1-next-20220407 #1 [ 864.496877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 864.498839] Call Trace: [ 864.499280] [ 864.499668] dump_stack_lvl+0x8b/0xb3 [ 864.500325] should_fail.cold+0x5/0xa [ 864.500972] _copy_to_user+0x2a/0x140 [ 864.501676] simple_read_from_buffer+0xcc/0x160 [ 864.502496] proc_fail_nth_read+0x194/0x220 [ 864.503248] ? proc_exe_link+0x1d0/0x1d0 [ 864.503973] ? security_file_permission+0xb1/0xd0 [ 864.504816] ? proc_exe_link+0x1d0/0x1d0 [ 864.505532] vfs_read+0x1ea/0x5d0 [ 864.506165] ksys_read+0x127/0x250 [ 864.506784] ? __ia32_sys_pwrite64+0x220/0x220 [ 864.507595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.508512] do_syscall_64+0x3b/0x90 00:16:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 14) [ 864.509172] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 864.510112] RIP: 0033:0x7f066651269c [ 864.510759] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 864.514216] RSP: 002b:00007f0663ad5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 864.515471] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f066651269c [ 864.516688] RDX: 000000000000000f RSI: 00007f0663ad51e0 RDI: 0000000000000004 [ 864.517915] RBP: 00007f0663ad51d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.519108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.520313] R13: 00007ffe1e4b661f R14: 00007f0663ad5300 R15: 0000000000022000 [ 864.521547] [ 864.526939] FAULT_INJECTION: forcing a failure. [ 864.526939] name failslab, interval 1, probability 0, space 0, times 0 [ 864.528854] CPU: 1 PID: 6929 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 864.530272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 864.532138] Call Trace: [ 864.532580] [ 864.532964] dump_stack_lvl+0x8b/0xb3 [ 864.533632] should_fail.cold+0x5/0xa [ 864.534326] ? create_object.isra.0+0x3a/0xa20 [ 864.535112] should_failslab+0x5/0x10 [ 864.535714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 864.535772] kmem_cache_alloc+0x5b/0x480 [ 864.537018] FAULT_INJECTION: forcing a failure. [ 864.537018] name failslab, interval 1, probability 0, space 0, times 0 [ 864.537566] create_object.isra.0+0x3a/0xa20 [ 864.537604] ? kasan_unpoison+0x23/0x50 [ 864.540354] __kmalloc+0x25b/0x440 [ 864.540981] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 864.542088] genl_family_rcv_msg_doit+0xda/0x330 [ 864.542900] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 864.544010] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 864.544947] ? cap_capable+0x1eb/0x250 [ 864.545625] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 864.546601] ? security_capable+0x95/0xc0 [ 864.547311] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 864.548239] ? ns_capable+0xd9/0x100 [ 864.548891] genl_rcv_msg+0x33c/0x5a0 [ 864.549537] ? genl_get_cmd+0x480/0x480 [ 864.550246] ? nl80211_set_channel+0x70/0x70 [ 864.550990] ? lock_release+0x750/0x750 [ 864.551679] netlink_rcv_skb+0x14b/0x430 [ 864.552508] ? genl_get_cmd+0x480/0x480 [ 864.553158] ? netlink_ack+0xa80/0xa80 [ 864.553849] ? netlink_deliver_tap+0x1b2/0xc30 [ 864.554610] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 864.555442] ? is_vmalloc_addr+0x7b/0xb0 [ 864.556118] genl_rcv+0x24/0x40 [ 864.556675] netlink_unicast+0x54a/0x800 [ 864.557360] ? netlink_attachskb+0x880/0x880 [ 864.558133] ? is_vmalloc_addr+0x7b/0xb0 [ 864.558819] netlink_sendmsg+0x904/0xe00 [ 864.559508] ? netlink_unicast+0x800/0x800 [ 864.560233] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 864.561143] ? netlink_unicast+0x800/0x800 [ 864.561871] sock_sendmsg+0x150/0x190 [ 864.562512] ____sys_sendmsg+0x703/0x870 [ 864.563196] ? kernel_sendmsg+0x50/0x50 [ 864.563853] ? __ia32_sys_recvmmsg+0x260/0x260 [ 864.564627] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 864.565503] ? lock_release+0x3b2/0x750 [ 864.566203] ___sys_sendmsg+0xf3/0x170 [ 864.566847] ? sendmsg_copy_msghdr+0x160/0x160 [ 864.567608] ? lock_release+0x3b2/0x750 [ 864.568263] ? lock_downgrade+0x6d0/0x6d0 [ 864.568951] ? lock_release+0x3b2/0x750 [ 864.569600] ? ksys_write+0x20c/0x250 [ 864.570265] ? lock_downgrade+0x6d0/0x6d0 [ 864.570942] ? __fget_files+0x287/0x470 [ 864.571610] ? __fget_light+0xea/0x270 [ 864.572252] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 864.573159] __sys_sendmsg+0xe5/0x1b0 [ 864.573826] ? __sys_sendmsg_sock+0x30/0x30 [ 864.574546] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 864.575474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.576345] do_syscall_64+0x3b/0x90 [ 864.576967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 864.577837] RIP: 0033:0x7efdda772b19 [ 864.578443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.581336] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.582674] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 864.583790] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 864.584939] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.586108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.587242] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 864.588420] [ 864.588810] CPU: 0 PID: 6939 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 864.588937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 864.589955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 864.589972] Call Trace: [ 864.589981] [ 864.589990] dump_stack_lvl+0x8b/0xb3 [ 864.593888] should_fail.cold+0x5/0xa [ 864.594394] ? create_object.isra.0+0x3a/0xa20 [ 864.594990] should_failslab+0x5/0x10 [ 864.595507] kmem_cache_alloc+0x5b/0x480 [ 864.596062] create_object.isra.0+0x3a/0xa20 [ 864.596648] ? kasan_unpoison+0x23/0x50 [ 864.597183] __kmalloc_node_track_caller+0x269/0x440 [ 864.597873] ? netlink_ack+0x1f0/0xa80 [ 864.598399] __alloc_skb+0xe3/0x340 [ 864.598892] netlink_ack+0x1f0/0xa80 [ 864.599397] ? nl80211_set_channel+0x70/0x70 [ 864.599988] ? netlink_sendmsg+0xe00/0xe00 [ 864.600568] ? lock_release+0x750/0x750 [ 864.601088] netlink_rcv_skb+0x348/0x430 [ 864.601622] ? genl_get_cmd+0x480/0x480 [ 864.602177] ? netlink_ack+0xa80/0xa80 [ 864.602704] ? netlink_deliver_tap+0x1b2/0xc30 [ 864.603319] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 864.603974] ? is_vmalloc_addr+0x7b/0xb0 [ 864.604516] genl_rcv+0x24/0x40 [ 864.604968] netlink_unicast+0x54a/0x800 [ 864.605520] ? netlink_attachskb+0x880/0x880 [ 864.606133] ? is_vmalloc_addr+0x7b/0xb0 [ 864.606675] netlink_sendmsg+0x904/0xe00 [ 864.607233] ? netlink_unicast+0x800/0x800 [ 864.607796] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 864.608513] ? netlink_unicast+0x800/0x800 [ 864.609121] sock_sendmsg+0x150/0x190 [ 864.609635] ____sys_sendmsg+0x703/0x870 [ 864.610191] ? kernel_sendmsg+0x50/0x50 [ 864.610720] ? __ia32_sys_recvmmsg+0x260/0x260 [ 864.611332] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 864.612027] ? lock_release+0x3b2/0x750 [ 864.612570] ___sys_sendmsg+0xf3/0x170 [ 864.613095] ? sendmsg_copy_msghdr+0x160/0x160 [ 864.613724] ? lock_release+0x3b2/0x750 [ 864.614252] ? lock_downgrade+0x6d0/0x6d0 [ 864.614801] ? lock_release+0x3b2/0x750 [ 864.615321] ? ksys_write+0x20c/0x250 [ 864.615830] ? lock_downgrade+0x6d0/0x6d0 [ 864.616391] ? __fget_files+0x287/0x470 [ 864.616938] ? __fget_light+0xea/0x270 [ 864.617458] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 864.618219] __sys_sendmsg+0xe5/0x1b0 [ 864.618733] ? __sys_sendmsg_sock+0x30/0x30 [ 864.619308] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 864.620055] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.620755] do_syscall_64+0x3b/0x90 [ 864.621261] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 864.621962] RIP: 0033:0x7f094bc34b19 [ 864.622454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.624816] RSP: 002b:00007f09491aa188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.625774] RAX: ffffffffffffffda RBX: 00007f094bd47f60 RCX: 00007f094bc34b19 [ 864.626695] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 864.627617] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.628540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.629460] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 864.630402] 00:16:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:16:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:16:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) accept4(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x80, 0x80800) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 864.917123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 15) 00:16:17 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) ioctl$FIONCLEX(r0, 0x5450) listen(r0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xaf, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @tim={0x5, 0x81, {0x5, 0xc1, 0x0, "2e162261aa80cb7ad145ba3537329f29d0413a022f81d78ba9de1ce5e2de65be76a8555a78b3a7a1cc4e2524b94f2f7fba4e54a1ee4338d8fd1de6bc270176f9fc4ef90b50b86ae214bfbad2f3c21ce3f2b8ac3c74d83589cd0b48dde8b5084483fbb92eb65e9a9c396bef1d09a09065254ec944f8f69ed0b758533fe918"}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8001}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfb}, @NL80211_ATTR_MAC={0xa}]}, 0xec}, 0x1, 0x0, 0x0, 0x44}, 0x8000) shutdown(r0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x210}], 0x1, 0x0) 00:16:17 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r2}}, 0xa3) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) io_uring_enter(r4, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x300, 0x0, 0x37) 00:16:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:16:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:16:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 10) [ 881.126325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 881.136774] FAULT_INJECTION: forcing a failure. [ 881.136774] name failslab, interval 1, probability 0, space 0, times 0 [ 881.138377] CPU: 1 PID: 6969 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 881.139408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 881.140808] Call Trace: [ 881.141139] [ 881.141432] dump_stack_lvl+0x8b/0xb3 [ 881.141954] should_fail.cold+0x5/0xa [ 881.142454] ? __alloc_skb+0x211/0x340 [ 881.142958] should_failslab+0x5/0x10 [ 881.143469] kmem_cache_alloc_node+0x55/0x490 00:16:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:17 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1015, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 881.144173] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 881.150706] __alloc_skb+0x211/0x340 [ 881.151591] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 881.152900] netlink_ack+0x1f0/0xa80 [ 881.153807] ? nl80211_set_channel+0x70/0x70 [ 881.155061] ? netlink_sendmsg+0xe00/0xe00 [ 881.156024] ? lock_release+0x750/0x750 [ 881.156942] netlink_rcv_skb+0x348/0x430 [ 881.157882] ? genl_get_cmd+0x480/0x480 [ 881.159057] ? netlink_ack+0xa80/0xa80 [ 881.159991] ? netlink_deliver_tap+0x1b2/0xc30 [ 881.161107] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 881.162419] ? is_vmalloc_addr+0x7b/0xb0 [ 881.163379] genl_rcv+0x24/0x40 [ 881.164163] netlink_unicast+0x54a/0x800 [ 881.165113] ? netlink_attachskb+0x880/0x880 [ 881.166197] ? is_vmalloc_addr+0x7b/0xb0 [ 881.167201] netlink_sendmsg+0x904/0xe00 [ 881.168197] ? netlink_unicast+0x800/0x800 [ 881.169316] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 881.170327] ? netlink_unicast+0x800/0x800 [ 881.170901] sock_sendmsg+0x150/0x190 [ 881.171417] ____sys_sendmsg+0x703/0x870 [ 881.171976] ? kernel_sendmsg+0x50/0x50 [ 881.172517] ? __ia32_sys_recvmmsg+0x260/0x260 [ 881.173128] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 881.173822] ? lock_release+0x3b2/0x750 [ 881.175025] ___sys_sendmsg+0xf3/0x170 [ 881.176100] ? sendmsg_copy_msghdr+0x160/0x160 [ 881.177274] ? lock_release+0x3b2/0x750 [ 881.177931] ? lock_downgrade+0x6d0/0x6d0 [ 881.178563] ? lock_release+0x3b2/0x750 [ 881.179126] ? ksys_write+0x20c/0x250 [ 881.179683] ? lock_downgrade+0x6d0/0x6d0 [ 881.180303] ? __fget_files+0x287/0x470 [ 881.180892] ? __fget_light+0xea/0x270 [ 881.181512] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 881.182369] __sys_sendmsg+0xe5/0x1b0 [ 881.182924] ? __sys_sendmsg_sock+0x30/0x30 [ 881.183552] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 881.184392] ? syscall_enter_from_user_mode+0x1d/0x50 [ 881.185167] do_syscall_64+0x3b/0x90 [ 881.185724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 881.186520] RIP: 0033:0x7efdda772b19 [ 881.187074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 881.189705] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.190799] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 881.191863] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 881.192895] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 881.193914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 881.194950] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 881.195957] [ 881.212782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 881.224128] FAULT_INJECTION: forcing a failure. [ 881.224128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.227516] CPU: 1 PID: 6974 Comm: syz-executor.3 Not tainted 5.18.0-rc1-next-20220407 #1 [ 881.228703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 881.230364] Call Trace: [ 881.230730] [ 881.231048] dump_stack_lvl+0x8b/0xb3 [ 881.231643] should_fail.cold+0x5/0xa [ 881.232189] _copy_from_user+0x2a/0x170 [ 881.232804] kstrtouint_from_user+0xac/0x160 [ 881.233431] ? kstrtouint+0x120/0x120 [ 881.234015] ? lock_acquire+0x1b2/0x530 [ 881.234547] proc_fail_nth_write+0x78/0x220 [ 881.235112] ? proc_task_getattr+0x1f0/0x1f0 [ 881.236564] ? lock_is_held_type+0xd7/0x130 [ 881.237711] ? proc_task_getattr+0x1f0/0x1f0 [ 881.239067] vfs_write+0x264/0xac0 [ 881.239643] ksys_write+0x127/0x250 [ 881.240135] ? __ia32_sys_read+0xb0/0xb0 [ 881.240711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 881.241504] do_syscall_64+0x3b/0x90 [ 881.242078] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 881.242858] RIP: 0033:0x7f094bbe75ff [ 881.243399] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 881.246006] RSP: 002b:00007f09491aa170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 881.247005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f094bbe75ff [ 881.248007] RDX: 0000000000000001 RSI: 00007f09491aa1e0 RDI: 0000000000000004 [ 881.249023] RBP: 00007f09491aa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 881.250067] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 881.251050] R13: 00007ffef9ea0caf R14: 00007f09491aa300 R15: 0000000000022000 [ 881.252118] 00:16:17 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:16:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:17 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0/file0\x00', 0x100000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02000000", 0x69, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="02000000030000000400000015", 0xd, 0x5}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x2080}, {&(0x7f0000011800)="ed41000000080000e1f4655fe1f4655fe1f4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000ba56a6e5000000000000000000000000000000000000000000000000ed8100001a040000e1f4655fe1f4655fe1f4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060", 0xbd, 0x2580}, {&(0x7f00000000c0)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x8000}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c6530", 0x25, 0x28000}], 0x0, &(0x7f0000012f00)) unlinkat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x0) 00:16:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:16:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 11) [ 881.469738] loop7: detected capacity change from 0 to 2048 [ 881.471206] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 881.502555] loop7: detected capacity change from 0 to 2048 00:16:18 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 881.531640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 881.544469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 881.554655] FAULT_INJECTION: forcing a failure. [ 881.554655] name failslab, interval 1, probability 0, space 0, times 0 [ 881.556234] CPU: 1 PID: 7002 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 881.557317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 881.558798] Call Trace: [ 881.559143] [ 881.559478] dump_stack_lvl+0x8b/0xb3 [ 881.560004] should_fail.cold+0x5/0xa [ 881.560546] ? create_object.isra.0+0x3a/0xa20 [ 881.561182] should_failslab+0x5/0x10 [ 881.561711] kmem_cache_alloc+0x5b/0x480 [ 881.562314] create_object.isra.0+0x3a/0xa20 [ 881.562914] ? kasan_unpoison+0x23/0x50 [ 881.563469] kmem_cache_alloc_node+0x248/0x490 [ 881.564106] __alloc_skb+0x211/0x340 [ 881.564620] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 881.565380] netlink_ack+0x1f0/0xa80 [ 881.565897] ? nl80211_set_channel+0x70/0x70 [ 881.566531] ? netlink_sendmsg+0xe00/0xe00 [ 881.567124] ? lock_release+0x750/0x750 [ 881.567682] netlink_rcv_skb+0x348/0x430 [ 881.568245] ? genl_get_cmd+0x480/0x480 [ 881.568788] ? netlink_ack+0xa80/0xa80 [ 881.569348] ? netlink_deliver_tap+0x1b2/0xc30 [ 881.570011] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 881.572006] ? is_vmalloc_addr+0x7b/0xb0 [ 881.572557] genl_rcv+0x24/0x40 [ 881.573018] netlink_unicast+0x54a/0x800 00:16:18 executing program 7: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) capset(&(0x7f0000000340)={0x20080522, r1}, &(0x7f0000000380)={0x0, 0x407, 0x1000008, 0xffffff01, 0x8, 0x3}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) capset(&(0x7f0000000340)={0x20080522, r3}, &(0x7f0000000380)={0x0, 0x407, 0x1000008, 0xffffff01, 0x8, 0x3}) capset(&(0x7f0000000100)={0x20071026, r3}, &(0x7f0000000140)={0x9, 0x8, 0xdb89, 0xfffffeff, 0x1}) capset(&(0x7f0000000080)={0x0, r1}, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x0, 0x1}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) [ 881.573569] ? netlink_attachskb+0x880/0x880 [ 881.574186] ? is_vmalloc_addr+0x7b/0xb0 [ 881.574850] netlink_sendmsg+0x904/0xe00 [ 881.575456] ? netlink_unicast+0x800/0x800 [ 881.576083] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 881.577839] ? netlink_unicast+0x800/0x800 [ 881.578771] sock_sendmsg+0x150/0x190 [ 881.579335] ____sys_sendmsg+0x703/0x870 [ 881.579931] ? kernel_sendmsg+0x50/0x50 [ 881.580508] ? __ia32_sys_recvmmsg+0x260/0x260 [ 881.581170] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 881.581931] ? lock_release+0x3b2/0x750 [ 881.582490] ___sys_sendmsg+0xf3/0x170 [ 881.583051] ? sendmsg_copy_msghdr+0x160/0x160 [ 881.583692] ? lock_release+0x3b2/0x750 [ 881.584286] ? lock_downgrade+0x6d0/0x6d0 [ 881.584880] ? lock_release+0x3b2/0x750 [ 881.585455] ? ksys_write+0x20c/0x250 [ 881.586001] ? lock_downgrade+0x6d0/0x6d0 [ 881.586606] ? __fget_files+0x287/0x470 [ 881.587168] ? __fget_light+0xea/0x270 [ 881.588531] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 881.589354] __sys_sendmsg+0xe5/0x1b0 [ 881.589927] ? __sys_sendmsg_sock+0x30/0x30 [ 881.590580] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 881.591411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 881.592192] do_syscall_64+0x3b/0x90 [ 881.592719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 881.593404] RIP: 0033:0x7efdda772b19 [ 881.593945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 881.596410] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.597470] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 881.598487] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 881.599495] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 881.599510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:16:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 881.599522] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 881.599557] 00:16:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 881.709128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:31 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) io_uring_enter(r5, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:16:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:16:31 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x6, 0x0, &(0x7f0000000180)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f00000009c0)=[{r3, 0x8287}, {r4, 0x8000}, {0xffffffffffffffff, 0x48}, {r3, 0x8}, {r3, 0x100}, {r5, 0x8514}], 0x6, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000100)) 00:16:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:16:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 12) 00:16:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 894.908841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 894.915828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 894.922356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 894.925898] FAULT_INJECTION: forcing a failure. [ 894.925898] name failslab, interval 1, probability 0, space 0, times 0 [ 894.927313] CPU: 0 PID: 7030 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 894.928304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 894.929659] Call Trace: [ 894.929974] [ 894.930256] dump_stack_lvl+0x8b/0xb3 [ 894.930735] should_fail.cold+0x5/0xa [ 894.931199] should_failslab+0x5/0x10 [ 894.931662] __kmalloc_node_track_caller+0x7e/0x440 [ 894.932270] ? netlink_ack+0x1f0/0xa80 [ 894.932748] __alloc_skb+0xe3/0x340 [ 894.933189] netlink_ack+0x1f0/0xa80 [ 894.933641] ? nl80211_set_channel+0x70/0x70 [ 894.934179] ? netlink_sendmsg+0xe00/0xe00 [ 894.934692] ? lock_release+0x750/0x750 [ 894.935179] netlink_rcv_skb+0x348/0x430 [ 894.935670] ? genl_get_cmd+0x480/0x480 [ 894.936147] ? netlink_ack+0xa80/0xa80 [ 894.936624] ? netlink_deliver_tap+0x1b2/0xc30 [ 894.937178] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 894.937772] ? is_vmalloc_addr+0x7b/0xb0 [ 894.938590] genl_rcv+0x24/0x40 [ 894.939406] netlink_unicast+0x54a/0x800 [ 894.940385] ? netlink_attachskb+0x880/0x880 [ 894.941427] ? is_vmalloc_addr+0x7b/0xb0 [ 894.942444] netlink_sendmsg+0x904/0xe00 [ 894.943422] ? netlink_unicast+0x800/0x800 [ 894.944443] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 894.945747] ? netlink_unicast+0x800/0x800 [ 894.946766] sock_sendmsg+0x150/0x190 [ 894.947669] ____sys_sendmsg+0x703/0x870 [ 894.948632] ? kernel_sendmsg+0x50/0x50 [ 894.949571] ? __ia32_sys_recvmmsg+0x260/0x260 [ 894.950666] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 894.951905] ? lock_release+0x3b2/0x750 [ 894.952854] ___sys_sendmsg+0xf3/0x170 [ 894.953777] ? sendmsg_copy_msghdr+0x160/0x160 [ 894.954879] ? lock_release+0x3b2/0x750 [ 894.955806] ? lock_downgrade+0x6d0/0x6d0 [ 894.956627] ? lock_release+0x3b2/0x750 [ 894.957418] ? ksys_write+0x20c/0x250 [ 894.958176] ? lock_downgrade+0x6d0/0x6d0 [ 894.959005] ? __fget_files+0x287/0x470 [ 894.959812] ? __fget_light+0xea/0x270 [ 894.960594] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 894.961688] __sys_sendmsg+0xe5/0x1b0 [ 894.962457] ? __sys_sendmsg_sock+0x30/0x30 [ 894.963315] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 894.964426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 894.965461] do_syscall_64+0x3b/0x90 [ 894.966222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 894.967249] RIP: 0033:0x7efdda772b19 [ 894.967979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 894.971592] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.973081] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 894.974496] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 894.975889] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 894.977284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 894.978684] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 894.980106] 00:16:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:16:31 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) io_uring_enter(r5, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:16:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:16:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:31 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x10001}, 0x1c) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x2, 0x4) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 895.135807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.138060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:16:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:16:31 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6(0xa, 0x2, 0x5) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_sco(r3, &(0x7f0000000100)={0x1f, @none}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:16:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 13) [ 895.366250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:16:32 executing program 5: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) [ 895.391894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.437690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 895.451664] FAULT_INJECTION: forcing a failure. [ 895.451664] name failslab, interval 1, probability 0, space 0, times 0 [ 895.454022] CPU: 0 PID: 7079 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 895.455702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 895.457987] Call Trace: [ 895.458530] [ 895.458978] dump_stack_lvl+0x8b/0xb3 [ 895.459765] should_fail.cold+0x5/0xa [ 895.460549] ? create_object.isra.0+0x3a/0xa20 [ 895.461486] should_failslab+0x5/0x10 [ 895.462274] kmem_cache_alloc+0x5b/0x480 [ 895.463118] create_object.isra.0+0x3a/0xa20 [ 895.464025] ? kasan_unpoison+0x23/0x50 [ 895.464849] __kmalloc_node_track_caller+0x269/0x440 [ 895.465889] ? netlink_ack+0x1f0/0xa80 [ 895.466725] __alloc_skb+0xe3/0x340 [ 895.467481] netlink_ack+0x1f0/0xa80 [ 895.468244] ? nl80211_set_channel+0x70/0x70 [ 895.469129] ? netlink_sendmsg+0xe00/0xe00 [ 895.469989] ? lock_release+0x750/0x750 [ 895.470812] netlink_rcv_skb+0x348/0x430 [ 895.471636] ? genl_get_cmd+0x480/0x480 [ 895.472435] ? netlink_ack+0xa80/0xa80 [ 895.473242] ? netlink_deliver_tap+0x1b2/0xc30 [ 895.474161] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 895.475170] ? is_vmalloc_addr+0x7b/0xb0 [ 895.475985] genl_rcv+0x24/0x40 [ 895.476667] netlink_unicast+0x54a/0x800 [ 895.477496] ? netlink_attachskb+0x880/0x880 [ 895.478409] ? is_vmalloc_addr+0x7b/0xb0 [ 895.479235] netlink_sendmsg+0x904/0xe00 [ 895.480055] ? netlink_unicast+0x800/0x800 [ 895.480925] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 895.482018] ? netlink_unicast+0x800/0x800 [ 895.482881] sock_sendmsg+0x150/0x190 [ 895.483641] ____sys_sendmsg+0x703/0x870 [ 895.484481] ? kernel_sendmsg+0x50/0x50 [ 895.485268] ? __ia32_sys_recvmmsg+0x260/0x260 [ 895.486218] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 895.487271] ? lock_release+0x3b2/0x750 [ 895.488090] ___sys_sendmsg+0xf3/0x170 [ 895.488889] ? sendmsg_copy_msghdr+0x160/0x160 [ 895.489815] ? lock_release+0x3b2/0x750 [ 895.490633] ? lock_downgrade+0x6d0/0x6d0 [ 895.491469] ? lock_release+0x3b2/0x750 [ 895.492269] ? ksys_write+0x20c/0x250 [ 895.493031] ? lock_downgrade+0x6d0/0x6d0 [ 895.493877] ? __fget_files+0x287/0x470 [ 895.494718] ? __fget_light+0xea/0x270 [ 895.495514] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 895.496623] __sys_sendmsg+0xe5/0x1b0 [ 895.497411] ? __sys_sendmsg_sock+0x30/0x30 [ 895.498307] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 895.499441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 895.500508] do_syscall_64+0x3b/0x90 [ 895.501269] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 895.502325] RIP: 0033:0x7efdda772b19 [ 895.503076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 895.506788] RSP: 002b:00007efdd7ce8188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.508297] RAX: ffffffffffffffda RBX: 00007efdda885f60 RCX: 00007efdda772b19 [ 895.509718] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 895.511146] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 895.512570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 895.514000] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 895.515478] 00:16:32 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x6, 0x0, &(0x7f0000000180)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f00000009c0)=[{r3, 0x8287}, {r4, 0x8000}, {0xffffffffffffffff, 0x48}, {r3, 0x8}, {r3, 0x100}, {r5, 0x8514}], 0x6, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000100)) 00:16:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:16:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:16:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 895.624850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 895.628992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 900.338441] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 904.623259] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 906.874930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 906.881161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 906.885534] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 906.895879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 906.898577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 906.902042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 908.975164] Bluetooth: hci0: command 0x0409 tx timeout [ 911.023174] Bluetooth: hci0: command 0x041b tx timeout [ 913.071143] Bluetooth: hci0: command 0x040f tx timeout [ 915.119148] Bluetooth: hci0: command 0x0419 tx timeout [ 916.456196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.457490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.459885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 916.512668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.513966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.516231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:17:07 executing program 5: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:17:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth1_macvtap\x00'}) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:17:07 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) io_uring_enter(r5, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:17:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:07 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x6, 0x0, &(0x7f0000000180)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f00000009c0)=[{r3, 0x8287}, {r4, 0x8000}, {0xffffffffffffffff, 0x48}, {r3, 0x8}, {r3, 0x100}, {r5, 0x8514}], 0x6, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000100)) 00:17:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:17:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) (fail_nth: 14) [ 930.717986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 930.726919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 930.741670] FAULT_INJECTION: forcing a failure. [ 930.741670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.744171] CPU: 0 PID: 7575 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 930.745887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 930.748251] Call Trace: [ 930.748782] [ 930.749251] dump_stack_lvl+0x8b/0xb3 [ 930.750063] should_fail.cold+0x5/0xa [ 930.750892] _copy_to_user+0x2a/0x140 [ 930.751711] simple_read_from_buffer+0xcc/0x160 [ 930.752686] proc_fail_nth_read+0x194/0x220 [ 930.753608] ? proc_exe_link+0x1d0/0x1d0 [ 930.754466] ? security_file_permission+0xb1/0xd0 [ 930.755495] ? proc_exe_link+0x1d0/0x1d0 [ 930.756445] vfs_read+0x1ea/0x5d0 [ 930.757189] ksys_read+0x127/0x250 [ 930.757946] ? __ia32_sys_pwrite64+0x220/0x220 [ 930.758933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 930.760048] do_syscall_64+0x3b/0x90 [ 930.760870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 930.762034] RIP: 0033:0x7efdda72569c [ 930.762880] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 930.766787] RSP: 002b:00007efdd7ce8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 930.768383] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007efdda72569c [ 930.769886] RDX: 000000000000000f RSI: 00007efdd7ce81e0 RDI: 0000000000000004 [ 930.771402] RBP: 00007efdd7ce81d0 R08: 0000000000000000 R09: 0000000000000000 [ 930.772900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 930.774375] R13: 00007fff07494adf R14: 00007efdd7ce8300 R15: 0000000000022000 [ 930.775924] [ 930.783274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:17:07 executing program 0: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:17:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 930.801764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:17:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 930.865208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:17:23 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) io_uring_enter(r5, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:17:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:23 executing program 5: stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:17:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:23 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x6, 0x0, &(0x7f0000000180)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f00000009c0)=[{r3, 0x8287}, {r4, 0x8000}, {0xffffffffffffffff, 0x48}, {r3, 0x8}, {r3, 0x100}, {r5, 0x8514}], 0x6, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000100)) 00:17:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:23 executing program 0: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:17:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 00:17:23 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:17:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) listen(r0, 0x1) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x2280}], 0x1, 0x0) [ 947.312333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:17:23 executing program 0: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 947.351427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 947.354622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:17:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:24 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:17:24 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:17:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:17:24 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 947.423405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:17:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:24 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x6, 0x0, &(0x7f0000000180)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f00000009c0)=[{r3, 0x8287}, {r4, 0x8000}, {0xffffffffffffffff, 0x48}, {r3, 0x8}, {r3, 0x100}, {r5, 0x8514}], 0x6, 0x1) 00:17:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 947.527823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 947.566855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:17:37 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 00:17:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:37 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:17:37 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0xffffffffffffff3e) listen(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x800) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) shutdown(r2, 0x1) poll(&(0x7f0000000080)=[{r0, 0x4140}], 0x1, 0x9) 00:17:37 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:17:37 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:17:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 960.965937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 960.970279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 960.973295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:17:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) [ 961.020680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:17:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:37 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 00:17:37 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:17:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:37 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 961.105669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 961.105703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:17:53 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) 00:17:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:17:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:17:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:53 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:17:53 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r1, 0x0) bind$bt_sco(r0, &(0x7f0000000040), 0x8) shutdown(r1, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) [ 977.345612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 977.349783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 977.350651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:17:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:17:54 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:17:54 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) socket$packet(0x11, 0x2, 0x300) 00:17:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:17:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x3, 0x7}) bind$bt_sco(r1, &(0x7f0000000080), 0x8) ioctl(r0, 0x6, &(0x7f00000000c0)="f3090b4300") 00:17:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:17:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x68, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 977.515319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 977.539717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:18:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:18:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x68, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:08 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:18:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:18:08 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) 00:18:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6c, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) shutdown(r0, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) accept4(r0, &(0x7f0000000280)=@can, &(0x7f0000000000)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf071, 0xa}}, './file0\x00'}) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) [ 991.869831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:18:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:18:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) [ 991.894367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 991.898224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:18:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @none}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x1e) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:18:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 992.073898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:18:24 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) 00:18:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6c, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:24 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:18:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:18:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x6, @local, 0x8}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="d65f48664d1c33399f4f4e3b3d8a4fe6acb7a4949b3f0389bfea097bc2d6e04b586f86b939579350a6fbf9ccdeab57a05032a9eaa056ed9f6a3b", 0x3a}, {&(0x7f0000000100)="1adcea39bc16dbb9fb5ca3da24e6fb11387906a12df3e34dee2dda5d2336d6f272b2a7fb47ff8a9992dabb90f598973e22034bf3bdaa63d2ded0956b32297887f9846f562e5a2351d0fc987fe8c98b743b23e78948c3f293373d1a", 0x5b}, {&(0x7f0000000180)="1651bab2f73e4b9589f0975dc528c11708febbcd58adefd8e381517c185cff66d6725b87359484af5c2d59cd7cf17ee57a5bde478d86e4a00349c7451357c35949b5e5ea8bf09e312b6944d5d01d881e2681630f5df5e07b18594b43289f54332d0df426937d2c25c79a5233", 0x6c}, {&(0x7f0000000200)="8bad9444d0aa3418844237184f78e4f961ef301172d918142b20692d2f078bfef1664bd146384d17", 0x28}, {&(0x7f0000000240)="1bb646932ce0b8c51f5529b78bff261607d27aca33f1b257e7292c637d9b8e90735f6197e4302afc550502c2d10236b8744a728af93057df5c2fe0c0ca38449e0d4fbd5de779d48cdcb8309ec42217dbbf091f590387f6faf4f8c4bd", 0x5c}, {&(0x7f00000002c0)="669bdb8f0c33f422fdf7b567533936d80e0ace1c40751379f0ac0a64aaf1b820f706ee951ce989b9b3af08925ddb6800198e98c32169bb3f019c1d72a8f438b8c68bca5b2b7c33cf869e4969372b4b8d01d1baa379ce27984c0976356c701fbcbb3d5d6fe718079f45db317465fa80fda3feefe407457c19e42dd8e889096cea0281474e9c4bdc6c77a87ba246c54993398665409dd15383865d374367", 0x9d}, {&(0x7f0000000380)="ac8e24a47b0f2ebb83832b1996be417d5e9426f52dfea713ac7f2a8b83c89d65953cc06dc4", 0x25}], 0x7, &(0x7f0000000440)=[{0xd8, 0x101, 0x7, "acfeb1e51f6db54c3cb2ba67669e76bbfe0a5d9475f32dc0a888504684719b325df5b856b3577fe47c096347aec36ec95f745aa060e210d7de3281d4d23599c33fb6b3f22f065b77fe5694471d83c73ce42c3f764c05eba35405acaa7c51b2d2c17f8bb480c7dbb6fafb4f083f3adfe92403f64ae14239860b74a102188989c2244944f408a80ba985d3b1fa1ddfc53fecdcd3e5e57852fe01b48102f90f5419028531fe20065b1334de633edd014f20174be36d1bef746b636d6d39669a44d0fe38cc82"}, {0x90, 0x3a, 0x96, "99bc03f71a096970e827e199f2ee69825f422d9936b01f93e121fa11d69ac8a2bcc54a602cb407d313a8b8a89038b8c844ea964f0aa0a7f60b561911ef1a01fa3c91f712d54f7e272554c7e687cfcba6c389094efac0c474f9f6a0f9f4e08c5178f122990f7876d40e3394626dc5ca40442aa84c52b8ca3a0442af1c6263"}, {0xd8, 0x115, 0x80000000, "28977ed5f811ae6e2570cd2c611b8414cfe4ee1a5f018f1f6604880da494e799c0721f1bfae9097d077d40dc37314bc96a1da07f256552307c3816059fc011d90de8d22be9945b2d52e65fd6255d63aca63a22f11542af1f6ebbb8d4b563a592bacc3ef690e7e338b59fad1d8b92de0c62a5f12c260f2c29b500514cd595286c2cd275cb651522138b2b906713dfa555970155ae2cc7f2465a34397b8c5007471c7a0f7999b887c30bc77a10e2e0bb9db2249392ba0017e03672bc81482299511b"}, {0x20, 0x6, 0x80000000, "345df04a3f9938097d44f0"}], 0x260}, 0x1) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x241, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000780), 0x2) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) connect$bt_sco(r2, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:18:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:18:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) [ 1007.890591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1007.917368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1007.938453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:18:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:18:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:24 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) 00:18:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x6, 0x0, &(0x7f00000000c0)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000000), &(0x7f0000000040)) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:18:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1008.065754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1008.101982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1008.120183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:18:39 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:18:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) setresuid(0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 00:18:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:39 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) 00:18:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:18:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:39 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x401) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) bind$bt_sco(r2, &(0x7f0000001600)={0x1f, @fixed}, 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @private2, 0x8001}, 0x1c) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 1023.367774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1023.401584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1023.411605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:18:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:18:40 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:18:40 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:18:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xe9, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x4) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:18:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(0x0, 0x0) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:18:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1023.587450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1023.629199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.660810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:18:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:18:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(0x0, 0x0) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:18:40 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:18:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xfe6d) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:18:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x68, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1023.781754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1023.844660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1023.867513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:18:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(0x0, 0x0) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:18:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1031.599160] Bluetooth: hci0: command 0x0406 tx timeout 00:18:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:55 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:18:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6c, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) shutdown(r0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000000)=0x4, 0x4) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:18:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:18:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:18:55 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) [ 1039.209607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1039.231971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1039.240955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:55 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:18:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x74, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:18:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1039.358011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:19:11 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:19:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1054.758236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:19:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:19:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:19:11 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:19:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1054.776364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1054.791089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:11 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) listen(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:19:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x5, 0x0, &(0x7f0000000180)=0x99) poll(&(0x7f0000000080)=[{r1, 0x2308}], 0x1, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000000)) 00:19:26 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:19:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f0000000000)='./file0\x00', 0xe9) poll(&(0x7f0000000080), 0x0, 0x20008) 00:19:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:19:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:19:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:26 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) [ 1069.850910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1069.858473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1069.861082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:19:26 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:19:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x104, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xcbf, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1070.002638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1070.021433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1070.046803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:43 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:19:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000000)="13c9fa332b01fae8a1225d1470e478") 00:19:43 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:19:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:19:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:19:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1086.714949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1086.732772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1086.744824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:43 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:19:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4800, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:43 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600), 0x8) listen(0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:19:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xd21, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:19:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 1086.892876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1086.897505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1086.903614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:43 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:19:43 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600), 0x8) listen(0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:19:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:57 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:19:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:19:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:19:57 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$AUDIT_USER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, 0x3ed, 0x10, 0x70bd29, 0x25dfdbfd, "946d138fd2bba7daacbe2ba56697ab8ed5e38cfa7f287e30494f375c10ef08c7116a760cece07ca6d19059cbb6481a50012b6b6593a948ccd601e6ec65f2aa191c4fe9c9c32ddf1613d452428c9ba4db13cad93c95dd8ce1a4ec2df621", ["", "", "", "", "", "", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r1, 0x0) shutdown(r1, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) 00:19:57 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600), 0x8) listen(0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:19:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1100.777549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:57 executing program 7: openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) [ 1100.787220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:19:57 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) [ 1100.819508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:19:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x210d, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fbdbdf25050000000c00038008000100000000003c0003800800010080000000080001000700000008000300090000000800020007000000080002000101000008000300200000000800010000f0ff00240001800d0001007564703a73797a32000000000d0001007564703a73797a31000000000c0006800400020004000200"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r2, 0x0) shutdown(r2, 0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x0) 00:19:57 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:19:57 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:19:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1100.884169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1100.939952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:19:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4800, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6800, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:19:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:19:57 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) [ 1100.976210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1101.011534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:20:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x13be76ce, @loopback, 0x8}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @mcast1, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:20:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:20:11 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:20:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:11 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:20:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6c00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1115.199516] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1115.208774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1115.214847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:11 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:20:11 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:20:11 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) shutdown(r0, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) accept4(r0, &(0x7f0000000280)=@can, &(0x7f0000000000)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf071, 0xa}}, './file0\x00'}) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) 00:20:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xe21, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7400, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f00000000c0)=0x4) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:20:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6800, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1115.407159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1115.414478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1115.438886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:20:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:20:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6c00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:27 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:20:27 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) shutdown(r0, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) accept4(r0, &(0x7f0000000280)=@can, &(0x7f0000000000)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf071, 0xa}}, './file0\x00'}) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) 00:20:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r3, 0x0) shutdown(r3, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=""/104, &(0x7f00000000c0)=0x68) poll(&(0x7f0000000080)=[{r3}], 0x1, 0x0) [ 1131.367728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1131.369345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1131.391592] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:20:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x210e, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xbf0c, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1131.443402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1131.498057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:20:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4800, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) shutdown(r0, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) accept4(r0, &(0x7f0000000280)=@can, &(0x7f0000000000)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf071, 0xa}}, './file0\x00'}) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) 00:20:28 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:20:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7400, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1131.571389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1131.648423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1133.751494] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1133.755460] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1133.757769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1133.765733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1133.768610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1133.771954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1135.855070] Bluetooth: hci3: command 0x0409 tx timeout [ 1137.903322] Bluetooth: hci3: command 0x041b tx timeout [ 1139.951568] Bluetooth: hci3: command 0x040f tx timeout [ 1142.000140] Bluetooth: hci3: command 0x0419 tx timeout [ 1143.216517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.217669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.223405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1143.243554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.244738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.246858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:20:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:55 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) shutdown(r0, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) accept4(r0, &(0x7f0000000280)=@can, &(0x7f0000000000)=0x80, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf071, 0xa}}, './file0\x00'}) 00:20:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x2) shutdown(r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvfrom(r1, &(0x7f00000007c0)=""/78, 0x4e, 0x40002062, &(0x7f0000000840)=@phonet={0x23, 0xff, 0x41, 0x1}, 0x80) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = eventfd2(0x3, 0x800) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f00000000c0)=ANY=[@ANYBLOB="02ccb26902c586e45c7b"], 0xa, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r4, 0x3, 0x6, 0x0, 0x5}) 00:20:55 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:20:55 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:20:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:20:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1158.821429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:55 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) [ 1158.846554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:20:55 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600), 0x8) listen(0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:20:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6800, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:20:55 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) shutdown(r0, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) accept4(r0, &(0x7f0000000280)=@can, &(0x7f0000000000)=0x80, 0x800) 00:20:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1158.988939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1159.002867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:20:55 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600), 0x8) listen(0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:20:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1159.123191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1163.439926] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 1167.727067] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 1170.020618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1170.022946] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1170.028241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1170.046817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1170.048734] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1170.051233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1172.079158] Bluetooth: hci6: command 0x0409 tx timeout [ 1174.130589] Bluetooth: hci6: command 0x041b tx timeout [ 1176.178600] Bluetooth: hci6: command 0x040f tx timeout [ 1178.223807] Bluetooth: hci6: command 0x0419 tx timeout [ 1179.752406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.753618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.756765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1179.781909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.783185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.785652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1179.985608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xe900, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:32 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) shutdown(r0, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:21:32 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000000c0)={0x0, 0x20, 0x9, 0x1}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @none}, 0x8) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{}], 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop1', 0xa400, 0x4) dup3(r1, 0xffffffffffffffff, 0x80000) [ 1195.725314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:21:32 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600), 0x8) listen(0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:21:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6c00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:32 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:21:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:21:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1195.776998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:32 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) shutdown(r0, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) [ 1195.789599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x400300, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1195.851463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:21:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7400, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:32 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:21:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xe0ffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:32 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0x6, &(0x7f0000000540)=[{&(0x7f0000000080)="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", 0xfd, 0x9}, {&(0x7f0000000180)="ff5fb0f0abd165b1494c92c012e453f31f97c7038388a3792b9c28f1fc6036ff552d796f3ff536e95978a0731bf6a11a94834b3b057a4d1f61bcf607acd53c29957af630027997f7d000e81c57d77df19276a5419f823963906dbbc3c30d91beff", 0x61, 0xc2c7}, {&(0x7f0000000200)="a426203538158598e599c92352d5f73be6cdb7465be5e75bd967e3be235d7aaaf10c7011aab995bd3adbfae7915e2c60e529c000bdeb022b297edd8e4b577832c3f67b90701b664d16344eb32817a3e9410acb3045aaf78b24db8fd52787e9c092974a2d384944186f5fc2210f16c76b88745c380bdcc8729f62614328f003cbbc3c4153ef9c02948f8106a93f4ce3ad89359c8674e5e65bd1de8d2b15f56efcbdff94d6dda6df0d0afae0c8bc2e77410026ab2c092a9b9ebcb8e67eeeaed5cc6cd9f883dc364d33f3ec25085a3f4e00499b8b6a11da8aedfbe3f88c1dfc92b97c3e54dbe8b322b548811b6d0e1afe8d", 0xf0, 0xb85}, {&(0x7f0000000d40)="c251613dabf0df461cef5f6864a0952cc03231f0dd4ccf91695c0bfd95096ce50f14feef52dbe7fb11b191df94c49b04b766093c2cb2231e2dd1e5f4bca654bcf6366a1208c6cd84d901dbe957ec6293ef0bbb93239e6e03147ae47d9c2867184c3931c0a92d8d86dd83f00e576c493742a240661c9f0f44ddc178ac9925b0197d295e1b4b9b40ed39994865e7ff37031ac6a42df03862c3041d9c6ea8f3e4b7b1fd7ac847347a6cc95e581b16cd99a3268900"/192, 0xc0, 0x400}, {&(0x7f00000003c0)="d36a5c13a88e44d1a26058e6f7e63ca3ffd17893f3e78df05951e867c8d1d329785938c63904c91b0684c3fc9e2a423158609b9e96a0543b98a4ce86ae3265b9a1db1071e214505bf6574cc79833eeee892fa7511645711cd8d8a396cc164399e2916ed5439392cbbb31d2d40d5193add3547c67a685a177b33a6e5ea60cceef3af73fd38ea3235539053b86f1c99aa9e776e62bbe8fe5d196716c7a809f4dc300b671aafa3614ffdc85482db92e0e681bda55d0ccc13f2b656dc7e480098a75c6e322cd193e383f72412be95253db966f03268fdc9f", 0xd6, 0x8}, {&(0x7f00000004c0)="b3fc70f65b2111c62cb1089fe65e9936b35f1bbeafe637bb68a76dfba8c14a38c90b3f9abd0d5f9262b3b699178efe2cb1ac899e3ff2d16fe099209a1500bb483a0f2da7ca8db4d446d72af3ede1696d72111f0c25e36e63c078af016256a18aca3f389f541d9a326d7dfb1aa5aec86777ef9331e2db37", 0x77, 0x692}], 0x3040402, &(0x7f0000000600)=ANY=[@ANYBLOB='measure,fownar>', @ANYRESDEC=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',fowner>', @ANYRESDEC, @ANYBLOB=',uid>', @ANYRESDEC=0x0, @ANYBLOB=',dont_appraise,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',uid<', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) openat$urandom(0xffffffffffffff9c, &(0x7f0000000700), 0x511403, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) r3 = syz_mount_image$nfs4(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x9, 0x4, &(0x7f0000000a80)=[{&(0x7f00000007c0)="17667c09c9dda6ad21fb5ae86b36f91fc4d73a7e76ab3dfc55525a6cb431622e2d7cf4e7da7c73de170353d4aafa736e1bbc0cfe4c4240e8acc57c38c16e1e182367bd46e30f1857a99fbee8794e7f28ab835d3b4b035a4cb7", 0x59}, {&(0x7f0000000840)="f34407e7aeaff4570d5e02d195819529cfb08e06cb8f875b48c84e6263532f95e09578df864772a9c061e8db65d1487bb252995be1452a4cd85610e0538edf3e6a3ab0ea210764979565d13b5296019ea372b8a5f7612d0f4ea19ef4bb5921ae6ba2ba26551a6a28f3b130df2ebcf6a59c39b0f6845b1944c7dc2003d04dfa6d047ef19ebaa95756e2609a0f83ac99dbd1959af3bede7f07b5478c81e2d0faf23d72e1dd9ad3c58e3be1d061b275d68950c9e491dc61d70090be171dbaaeeaa16d968faefad614b1604e1f7382680f6bada880ed791e481ed8a56ff43b89091c0e918774df6f693cc6581966272a8d34", 0xf0}, {&(0x7f0000000940)="5e6adf8b54f2746fe9e56d378491727539a1da7d16ccd74a0a67a025a55419af167bcf43231caf735c2490f2bf9a4102b09d9ae642d647b00bf5965c9d5994247bc4e1abf015d4fed87b24565fa466d599f41534fe8defa2e315151569d41e97b002a85cfe1036e1e6750b17b564bea30fd788fd5c5e81305ba0a0142c187b66a99055d9f36212a5c61d00f526e8f8f91f00f192aa47d71a", 0x98, 0x4}, {&(0x7f0000000a00)="89fede1e36c9ddbbf1812f0e5be3333879abdbdf4aefa9a971dde30af35f8ea4ff2c66fc26d0c13a06cd8f8984c64ec62c21e9468740eeb47e15b167055c9dbeefd7cd1fb040f0a0cd3a3111aaafbf639544249db16998890963783eacf4922e9dffe674e66b818041f4b1f7fca5c732a094b8534ac24e1139472363e3e3", 0x7e, 0x7bf2}], 0x200004, &(0x7f0000000e00)=ANY=[@ANYBLOB='dont_appraise,euid>', @ANYRESDEC=0xee01, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB="5f71d04ed4dff7e74f245036c3430a596df68609197eaa715ad79ae46761c9b4bded0cd2941ea01db8e56e1f4591c79b15094a897dbd8092a49a7f78dc6b6595b0f396c44fa184bd38212d382994cb1e2f69c11492edbea87e8fb6df295eda08704c5c1048bb64207cf6f126b0ae2d04cdceea3a34deb1d65ceaa7c6cf84a4fed30f9648"]) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x6, 0x0, &(0x7f0000000180)) r5 = syz_open_dev$vcsa(&(0x7f0000000b80), 0x7, 0x44600) r6 = accept4$packet(r5, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14, 0x80000) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0x6, 0x0, &(0x7f0000000180)) poll(&(0x7f0000000c40)=[{r0, 0x2}, {r1, 0x60}, {0xffffffffffffffff, 0xc0}, {r2, 0x2090}, {r3, 0x40}, {r2, 0x81}, {r5, 0x1}, {r6, 0x100c}, {r7, 0x8b}], 0x9, 0xfd) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000cc0)='veth1_to_hsr\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)={r8, 0x1, 0x6, @broadcast}, 0x10) 00:21:32 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) [ 1195.977306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1195.986894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1195.991935] loop1: detected capacity change from 0 to 194 [ 1196.003200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1196.017527] loop1: detected capacity change from 0 to 123 [ 1196.022333] nfs4: Unknown parameter 'dont_appraise' 00:21:32 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) [ 1196.160706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:32 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:21:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1196.221040] loop1: detected capacity change from 0 to 194 [ 1196.237452] loop1: detected capacity change from 0 to 123 [ 1196.239239] nfs4: Unknown parameter 'dont_appraise' 00:21:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty, 0x100}, 0x1c) 00:21:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:21:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:49 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:21:49 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) 00:21:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1212.460433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1212.471081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1212.476007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:21:49 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:21:49 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 00:21:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:21:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0xffffffff) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:21:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1212.643913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1212.645152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1212.665791] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:21:49 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:22:05 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:22:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 00:22:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x400300, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:05 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) shutdown(r0, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:22:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:05 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:22:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xfffffffffffffffc, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1229.320831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1229.344174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1229.388707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xe0ffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:06 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) [ 1229.468943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:06 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000180)) listen(r1, 0x5) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000140)='\x00', r2) listen(r0, 0x0) shutdown(r0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x6, 0x0, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, r6, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @remote}, 0x10) poll(&(0x7f0000000080), 0x0, 0x5) 00:22:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1229.546064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1229.592416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1229.636706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1229.696236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:22:22 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:22:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:22:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x24094}, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) shutdown(r2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x9}) 00:22:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x400300, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 00:22:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) [ 1245.811492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1245.851618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1245.857829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:22:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1245.935848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xe0ffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:22:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1246.044898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1246.071882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) [ 1246.167326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1250.415698] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 1252.663579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1252.673125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1252.674429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1252.678784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1252.680655] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1252.681749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1254.703023] Bluetooth: hci0: command 0x0409 tx timeout [ 1256.751021] Bluetooth: hci0: command 0x041b tx timeout [ 1256.879776] Bluetooth: hci3: command 0x0406 tx timeout [ 1258.800640] Bluetooth: hci0: command 0x040f tx timeout [ 1260.848034] Bluetooth: hci0: command 0x0419 tx timeout [ 1261.590077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.591214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.593835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1261.640425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.641571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.643609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:22:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:54 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:22:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:22:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) sendmsg(r1, &(0x7f0000000640)={&(0x7f0000000000)=@ll={0x11, 0x17, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="12247fac8872f1a63a3c1a04fd5c4b94ad0faf1f242bb3afd5f92c22bebcd80c83481c1ed574f0de4f6e997d69835d9a71aec71fe5115ec7db37f734e46a2efcad53af0d1ae3aad41fa0691476a5bd3d119b1016b8d3ce6b26418c3664a47ca7abeb666954bf7128b27c8e98803b5b0690934d2cd4ea2121971938900df257341c4a8f5bffd9c50c4ccc1dd5a3d43d11f98f50793ef84a2dc17ccec2eb25a249ce50f094c699c47d5abfddb5a40e7d0914ea1dff283f85f0b6f23d74d2691973f5b852dc32bf9ce4e6549b2d6f1c527efab65611918c8ba70a21316a8e37907e9ddee3", 0xe3}, {&(0x7f00000001c0)="c5055d35a2a7008c155c019f8bdb183ab86d3174be40c5fe3c0904d826454807d18e56662285f330633abbb0b45e26260bea072157580b9dce308ee49de46eab6ebc82d89f6afa2a1d1e4d02a28928d1d74002bdee1c69e609d7e15eaa1907484c2319388c6577b41efbbaf6457a16cda1cea98b54bb8cf706242843d32cb7075c340041715f154bcdde1b01d8dc810639701eec8dc4fec7a550f755e70f927658e4bc01533587fd0373544cce7a681e4f2351242db0f459994a999d42bcb5cbda49f75074584d72e7229fe77d6a847086ba0987", 0xd4}], 0x2, &(0x7f0000000300)=[{0xe8, 0x11, 0xffff, "a06c95acc513bdc47d0581743120b772253afce0400129f2fe2c014e679c72df764907012811ebd4dbb88c99841752db3e1a1ed6eb5c6956101a9b74155e7cd65c3f0eb2aa844b7c41d6bd7bee03c4d20048d267b3cfdf1705d9759b44b70a89f03ae89bd3c4236bea066cafcd28f9d5cb73f08ce0883594ac534d68b820c7cfc783fd4046063171e683d3f073c595274e700522e198311f3aa2cded0773dc0bc38f5117d88bb334d862f8586ab7312d2c63301bed5750273720ae5172e589deb76af7485b6217ffbf75cc21f13e341bb33538"}, {0x80, 0x111, 0x200, "c3bb38a356b196aae6aab4fb908437008b8487d8fdca19930e0651d129f69938369720a90efbeef9fb587d8e692da1c1fa0c317a8704fa2f0853d9055b393e6d8390fbded11e52fbb843776bf999955eeeae38342da472df3cc5707e265e027211b9f3be2d54f47053741043daf905"}, {0x18, 0x88, 0x3, "ce1e097c"}, {0xa8, 0x101, 0x80, "6e166a0127ecc22cbb5ac8202c5261014fc0974174d3862f7772737ca23d8ad520886b872125513b8d0849fb7d4f0b0a982cccdac2021bfb49d46335851c53e1d499c9f4f8f27afd621b9befe6081a97d2bdd0a4c627390acd965e5b390ca453c9c0487f28b3e747ccd3d4dd52334376aad87c156d14576da819adedbfb0b4a70c7f71b5ffe19bfa1776c49a5cd6bfeeb9d66b03ecb8"}, {0xf8, 0x4, 0x10000, "d3d76366b725c45c1f71b44be64fe2680f05c2115dc34e41b8778b784f7cd6ce4123ab5c8f91b140f0376a68eb98fbff2d36d4e28caf630786a714c711c7b92ff4efac190bfa3a8c93a695bcffc00df31cc304dbd9b5dca97dd88b88e2f70a4f923a9dcf450f536b0ef8f1e225c8c26f65d19e9acc3876c35cf13117263cbadb5a1b58c6aec44995495fd80b949bf0bbfc80e59efcad7b9bbaf37fc8cc4ce055a7bbde86d51c431c3b1704653359ba49350dac037c6b384ab76fb30973059e3e6c9ecdc0fc057dbd233fe46fa051a6162900a0f082aecaca141ae484a529f97ec9f0"}], 0x320}, 0x400c004) 00:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:22:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1277.481050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1277.501429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1277.507528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1277.511885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @none}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:22:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:22:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 00:22:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1277.633720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:22:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 1277.706348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:22:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1277.790840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1277.798203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1279.535072] Bluetooth: hci0: command 0x0405 tx timeout [ 1293.999275] Bluetooth: hci6: command 0x0406 tx timeout 00:23:10 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:23:10 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x581202) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r1, 0x0) shutdown(r1, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000000c0)={0x8, 0x6, 0x8}) 00:23:10 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:23:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:23:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:23:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1294.354691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1294.359817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1294.367825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:23:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 00:23:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1294.467633] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1294.523980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1294.524494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x48000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:23:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) dup2(r0, r1) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 1294.612904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1294.655335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:23:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:23:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:23:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:23:27 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:23:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:23:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4010000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1310.992184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1311.012683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1311.013770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:23:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x210d0000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x68000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1311.164582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1311.173523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1311.194031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:23:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:23:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x48000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6c000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1311.305445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1311.310862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1311.332597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:23:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x74000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1311.444252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x68000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:43 executing program 5: bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(0xffffffffffffffff, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:23:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:23:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:23:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffe1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x1) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) poll(&(0x7f0000000000)=[{r1, 0x1}, {r3, 0x30d}], 0x2000000000000229, 0x0) 00:23:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:23:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1327.395559] __nla_validate_parse: 1 callbacks suppressed [ 1327.395574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1327.415473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1327.425118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:23:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6c000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:44 executing program 5: bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(0xffffffffffffffff, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:23:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1327.554808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = signalfd(r0, &(0x7f0000000000)={[0x4]}, 0x8) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) [ 1327.583583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1327.597649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:23:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x74000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:23:44 executing program 5: bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(0xffffffffffffffff, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:23:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1327.688560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1327.734066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:24:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:24:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:24:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x210e0000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xbf0c0000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:00 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:24:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x1, [{0x401, 0x5, 0xe1, '\x00', 0x400}]}) 00:24:00 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000300)='./file0\x00', 0x2f4c, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000340)="0b72e02f8a2700d121a01d27479cd73e5cdde1a1a84d12bd861e", 0x1a, 0x3}, {&(0x7f0000000380)="31a2ae6f44e62cf591c203d284ccd5722b4a23aff58a46a1d7cab1fea848ee516f9ff7f371d32c76d8f58682fd98bd842e35ef53e072611474465af44bf8e7016ceba23fb87657d39c1139a9989910d89aed67733963ee89c9b86f679f706ffc98f033c573e120971acda1d4f6923e2cd830678ed31387361817eaae40c94dae1e85f0e2dad1053b0ad98bd6bca8900d36d6f3caac74744d4d38c3f6a1629300125941e190f56ff2ec93fde254ef8483759b4b5113b85bd13565fd45775de6af4502174968f14486cd9f861ac347d92b85410c2dd4ee9c3986abc35aedb06d61cfbb9b91914f861e08ba4d2174f22f2a8596be0bf84cd20de3", 0xf9, 0x6}, {&(0x7f0000000480)="3e9c0873a6bda91604cffce9bff217804a2474011cc08475e0f4fa00dc82865ace03212136bf24d42e9b162e041c57cbe5d31c2bae1041055802de8e4bb4", 0x3e, 0x3}, {&(0x7f00000004c0)="7aa7b924a06ac63b29153d2889f68e1983b27a2eb546b6303b34f05d11cc48457b0da8897db794348de1f3314568d4438e1050ade0e646a6488439996b6d8ea34046c0f135ae863fe79f5e62818f9bc510c069bbaf60332a4fea68154c767b5e24e735c7b848b20e613048b37cf957511a2e95e015c6cf4cf79ad71867d26a8274b6ba8010394bfda5d2e904e3089405e72b307e483753e76834cc60291dcc8f41b21d531315cf6a0be4c769205c50b1c2427cfd66a4dfa0adb3cb712a9ff612dfa098a183732de6eeaab2f8a81502b93f559343df96c7f0f336705f732db5df", 0xe0, 0x8}], 0x2090022, &(0x7f0000000640)={[{@size={'size', 0x3d, [0x36, 0x65]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x37]}}, {@huge_always}, {@huge_always}, {@huge_advise}], [{@euid_gt={'euid>', r0}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r1, 0x0) shutdown(r1, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8e, 0x674}}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 1344.004327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1344.007263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1344.014706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1344.042853] loop1: detected capacity change from 0 to 23 00:24:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x48000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1344.144366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1344.149944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1344.220001] loop1: detected capacity change from 0 to 23 00:24:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:24:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4}) [ 1344.305579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1344.318873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:24:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0, 0xc208}], 0x1, 0x0) [ 1346.811320] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1346.815245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1346.816837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1346.819247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1346.820703] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1346.824848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1348.850095] Bluetooth: hci6: command 0x0409 tx timeout [ 1350.894994] Bluetooth: hci6: command 0x041b tx timeout [ 1352.943974] Bluetooth: hci6: command 0x040f tx timeout [ 1354.991985] Bluetooth: hci6: command 0x0419 tx timeout [ 1356.506332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.507647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.509844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1356.581631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.583165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.585318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1356.792093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfcffffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:29 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) shutdown(r0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000140)={0x0, 0xdb}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1ff, 0x442080) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x60, 0x2) 00:24:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xe9000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:29 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:24:29 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:24:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x1, [{0x401, 0x5, 0xe1, '\x00', 0x400}]}) 00:24:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:24:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x68000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1372.672221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1372.680816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:29 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1372.702277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6c000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:29 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) listen(r2, 0x3) 00:24:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffe000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1372.806833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1372.816071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1372.855765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:29 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:24:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x74000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfcffffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1372.981476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1372.988349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1374.703035] Bluetooth: hci6: command 0x0405 tx timeout [ 1375.665546] Bluetooth: hci0: command 0x0406 tx timeout 00:24:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:45 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:24:45 executing program 6: socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:24:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffe000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:45 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:24:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:24:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1389.218007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1389.276799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1389.281728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1389.283684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1389.297411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:24:45 executing program 6: socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:24:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1389.397450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) r2 = socket$packet(0x11, 0x2, 0x300) close_range(r0, r1, 0x0) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) poll(&(0x7f0000000040)=[{r1, 0x1}, {r1, 0xa000}, {r2, 0xc244}], 0x3, 0x1ff) [ 1389.409946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1389.433327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1391.343703] Bluetooth: hci6: command 0x0407 tx timeout 00:25:02 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:25:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:25:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:25:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x281, 0x4) 00:25:02 executing program 6: socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) [ 1405.789320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:25:02 executing program 7: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1405.833754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1405.849077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1405.849320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffffc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfcffffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:25:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003e80)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000003f80)=0xe8) sendmmsg$sock(r1, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="414add9c58c7ef6dd55e1b323cbf7f35b866664c37531381ddc3987b0fc5c05d41d9e79cd8522695b539a547b2d7e277a4f2144bd9239b14e88d0c830338709e85b041a37f8f2ffc32a8cb2d9d1951cd001754490ae647e9c1c7e0d9d479edae16e2925b7dc911c18d7623a78ea08c8c2fa77f26d5f3adb7b77c1d1c68fd58dcf5657adbc05cde53c89b47feb6cab68e8c07", 0x92}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000000)="2f8c63d8fff0a85a1a39c0ba5e2ca6ca315a1f71964b20ca9d37d8f63b33b244ac3da66b81f2fbd2cc79382dc2cabdf9fe3f715ff9f460dd9e305ad2f16adbafa31813fe12b8486685dd81ada28083f7af5d2214400184661d217035f4e5d06f3dfb06a8a5d92819b73e05825efd768c52796287a1dd2a78ee608b53", 0x7c}, {&(0x7f0000001180)="e49e5957d6193cb388ceaf15f03387d07b24e39aa5e14abbed1dfcffd0d653127e574228dc3b56172ae791092cf17219ad296f85067fda141a36c589540323809d843eac7935c3308c31b83456d4228b58149658b8fd69c9e10cfe4b04f5b30d6d9ba0506149f0599a7c529f037718516d840891d973df369bc8aa5faf7b15f0295ad5af19a30bcf3d1b0ad169892dd4d1127d7e8ec562827e57c9aff06cd1080caf73bd9f6acb21bfc2a82130c17efc74a79e2759a864ae72a024851bf7015e232b", 0xc2}, {&(0x7f0000001280)="e08ef931bf1d06139fe03a9c8629e00f22da2f913903d5d3b28174466665202e43b59be8f5fb8e5e95ec7ee8efc6cd5334409656478e97e3408c3349189cf3f60071ebdac36623bbc450e6d1ab51e6ffd26925a2361fed9b213a4725b598d6e6235492519a5c1d4ea6a401427b9a930a1fb30348a4ff2ee5c6bf419921eafe6290d07e09ce242b567b98de256ca13999b718a6140ec18fdab3210300ffd78a7cfc202c1837f66cc881f3a69cbd84a7375c87ae2e6781138965b1c141fdea9708679e2190650219846bb296c49d", 0xcd}], 0x6}}, {{&(0x7f0000001400)=@sco, 0x80, &(0x7f0000003900)=[{&(0x7f0000001480)="cbd544fe08e62b82259fe7bf1e53a6748953d69aea75e5ea21ae0814293cc2da3b891d9d7ae72932ff9f8619fe60acfd034232396abde2dd8b4f655983f3313b45195c6928ea02e000cb3449cbfabd34ff594ca6a085d6b67a637f391fcef1c99148302a2695314e452f1363d07fbb5aadfd86318889fcedeb614e890a1d3914259f008aeabe50f8b71ad0ab80b7cc8f1ca532f783d7", 0x96}, {&(0x7f0000002640)="a7bbaf730b92113377143f3d814239e348ccbb86aa828ce23d4c931384729f3fbb486c69597798473e7c7d7fc37752d56aa174c323b1c361849c28e4997c6cc7b80e491437c7421b9471fedee561e38e73b196bf71ae04fb7f5febb182f117e37cb95855ef571da8ec501a034a86864c8898a961fc8022b9562d5895609f29ebef81f4bd69579b2797c1723b3ad62fda7a488567c93f3af38cf6a1a60bc19d12353b4ec35d0f2713f36c8c0f19d686e95a8c8163545dbb6819ea6fe6a678c74282498c127aea2a050866fc1a5d2541829c2342e141feb3488ebcd8c94deedab2f4a2b388569bb35c", 0xe8}, {&(0x7f0000001540)="235657dc7be4920ea71130d8f45f3b86b4cbce73d3e6ac09ae558b7f1190eb985ca406f0cc838fb0aa016928feb25f03050ad576797a9e14491e8dc21915876430067a72112b950bd38d153ce92e1028ce65c249bcfb0cd793b1bfd3fea9aa51c0ba809fc15909a8a632856ee71dd7ec9872f0809692bb5696ed5775c33c1980d6afe581e76185887c8146d3b58612bcbc3ce33d9ff39ca66af1d73443bc572d3020dd9b4a1808b8eb2a31d98ece337ef6", 0xb1}, {&(0x7f0000002740)="b689a9b0067a52a5ebb5cef38b3e14293c33c5a051dde17adaaab80a9a60a32f92610354abb1ea2890ac18f35612299e672a", 0x32}, {&(0x7f0000002780)="b9ee747ddba35071ff4846ef8bb04c7ea31c3a3c652c36bff380ee7a390da01334539ef68e458b6f0634e32be13e1501d94c75f151c86371b6abcf3e082f77046c8a8bd85e378b1e335a81534cbcaf7e9ccbfb702fdc869937581aa68ddd6f9405783bc0a04710ee2cf365d35fb49f280ca23adbe9b8fae61e5e7a648ca68c8f6041db7831a02e286dd268467c087db43943b9e5fc5c146edaabd3c8634d4100187a3ab210d02c05484e243c2fceefe2f4198e1131039180348fb9a8406860ca1cb538b8dfe43bc6ac8ca45458621df0b26d4d6e00cc116458c600a567206822", 0xe0}, {&(0x7f0000002880)="254aa17f767d55f7a5f58b1b90a8fa89672ac4bb5420e7f0b72a0a64512bd3a47fbe05ad53f53c158ee81effd23754160b3e4dde8b482f23c138101815bdde0fc63307d24181919224b588d1fd23", 0x4e}, {&(0x7f0000002900)="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", 0x1000}], 0x7, &(0x7f0000003980)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x8c}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0xb0}}], 0xa8}}, {{&(0x7f0000003a40)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003ac0)="c91403222304ce05a0673293e37d7cbd20cb5bf296baff1d438bc49c150e4c435a54df4220bffd9a75184a86d3c9ded79000a3aafea4f6acf1e8430caa23a355dc6eeab2c9ac1b65", 0x48}, {&(0x7f0000003b40)="308826027ebd96770abd4de457f6da40274b6a47379cffec2923d244aebae5066b756ad487dfc24eebec0cf660c7fca71410859de12d59f023a1c38ca3fb59765efa0f6c00301c1528593cc29917ba4fc2f2ba8c060bcfa310dc12e547a6252677a8b1191bc56384e16b2b0d31b14be03b193eabedd32130618f6b9d1e2eb106d5473bee8f4e28acd5c88c8fc3f99d0bde323602f5ba2c567a07f17a9c7ccd9be2bd6403be6da7a5ae690df8db18daf14088064951260710afd6f3f3c923cfd57328e140376932bbc18bc9bc89584f50273bed7ca24412c3c7b2fa24cfb3b25fd0f9fe5cca", 0xe5}], 0x2, &(0x7f0000003c80)=[@mark={{0x14, 0x1, 0x24, 0xeb4}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xffff}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003d00)="945d99ffcb68bd08304919a76cff0b841b7e5379b23b2d97d8bf6f4c6b0080b0fda37e54289ae95fef6e4441de9b7131c25b522ab5ceb6e3411d90", 0x3b}, {&(0x7f0000003d40)="9ca60db1dfe11ec72876844f6166229ae6f52777", 0x14}], 0x2, &(0x7f0000003dc0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x89}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x78}}, {{&(0x7f0000003fc0)=@xdp={0x2c, 0xa, r2, 0x17}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004040)="0535ad503f792b532d19a33d5fc40bf008295948c9e89dee5834c4073ff8fe96664359ef461bf369ed47b9e5090d3e40aba36008c7d7454859d59ad5", 0x3c}, {&(0x7f0000004080)="e7845e147a600f8fb3b034f5e1991e1175ce8b8f2eee52fd27ab039fba8bf52ff8617f50771e494e3f62623a67fdfca186ad073a72c7f1a13e1a9c970476d843a52502caa14b43a06ffb3df46d7220bd29ce46d541814570d6b8074313f8db6006e5736cae10c7", 0x67}, {&(0x7f0000004100)="16c5b503f7b09d86ce1ffd99a4a4420ccf9bbe7cbdbfca35b996c8cff170f36e9ee535f8bb566eab", 0x28}], 0x3, &(0x7f0000004180)=[@timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x375ace98}}], 0x30}}, {{&(0x7f00000041c0)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)="0c660684460b9d05bee1495ced24c59140b957c668c9f0c1b190097fb35520fa10d421e456615fcbee1e9ade499bf6", 0x2f}, {&(0x7f0000004280)="2a78098b7662750d14403984f591829c1be380f9b14156f1e83f7443a15d8d5f42df36c2f6516870d296cceb43cbbc1f0f789cab8c4dd0d2daa618be1fb2963f9d29f01b74266f90ff1d113899e98332dfd418fbecba89b825378e034f4c4c358fa49b63e94f4a6447d24101ef8f430a3d91f7faf67cfdcf", 0x78}], 0x2, &(0x7f0000004340)=[@txtime={{0x18, 0x1, 0x3d, 0xfbc}}], 0x18}}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000004380)="b8978d488d93da4c5bc2ed28e12e730c28fab62e3a1e091ebf23968681d7ec14967e3a822596497fef1471c2c77f1f58abc5b3edee467bd5a5b449a6d6f8721a4d3efe72907f55b868761bf34f3374680349e03f22c9f25b2dfcebefd99c324138dfe6eea8598dda81b69318e2129295e1087f9c75f27dc0a6a5b821efc2fe072f6787fb17349ef1af06787ef182757d80403874456eada665e76efe43c8c02481fffab4b6a577b42588524e60e43f710e9c0198930a354a62a6b64ec9ac95ddcaae4218687c7edc8b8124df7b66688e9583549288309e2649c25fb5d2c496f665e232645813247ad7fe71fdbe3f23cb2e56a016", 0xf4}, {&(0x7f0000004480)="99f0412cf0d8161be173cf54aff9c6e13ebe6600448959a892ec1a17ddc0acdc288bbe24278fdf2a1493d501f0a00110aa5cdabf2d8af8b02fb9bb81042370daeaefeb52662f3aa0dc81790c892f6f8cebab", 0x52}, {&(0x7f0000004500)="bacfd3d22132b16a21a146ba0c918ce1a9532b25058a17ff3dbc6e979d3acb87ad5659f10c6d997cb6774bfecdf054794edacde8048d182ba619d5d6b821c6e2dd26cd1f7462d3f2b42990632dc137e3cbe3016ffc59406780ab7431ed708474bc24121d11a5c48bf46ffd3d1def7914fff1eebf2564bcfba9682b1aa1c305813de846732765a43f92e1a6f7e6", 0x8d}, {&(0x7f00000045c0)="55897ba8c71978e514254b81a64373a00bc3add66ba98490f2b75504b19af4c2662f11ba971a996cd289ffcb359cce79c0aaf0c2f932ef064638630a2ed9db26b41958c5a324b30160f38bb14087abdfb1470461a397254d3dd690b446bfc40f77ee3f8270bbab11472ead6be1eae1ce63ff38a1a5a244e417700548e8512d89401cc38c6aae7b", 0x87}, {&(0x7f0000004680)="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", 0xfb}], 0x5}}], 0x7, 0x80) 00:25:02 executing program 7: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1406.054509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1406.258451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:18 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:25:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffe000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:25:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:18 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:25:18 executing program 7: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:25:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1422.346015] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1422.384842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1422.393788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:25:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:19 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8) listen(r0, 0x80002) shutdown(r0, 0x0) poll(&(0x7f0000000080), 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) sendfile(r1, r1, &(0x7f0000000080)=0x1, 0x8001) 00:25:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:19 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1422.497446] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:25:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffffc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1422.597279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:19 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x480}], 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) capset(&(0x7f0000000340)={0x20080522, r2}, &(0x7f0000000380)={0x0, 0x407, 0x1000008, 0xffffff01, 0x8, 0x3}) syz_open_procfs(r2, &(0x7f0000000000)='net/nfsfs\x00') 00:25:19 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1422.690788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:25:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:35 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:25:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x24, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) dup3(0xffffffffffffffff, r1, 0x0) 00:25:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:25:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:35 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:25:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:25:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1438.900526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1438.904821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:25:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:25:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:25:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400) 00:25:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000340)={0x7, 'bridge_slave_0\x00', {0xfffffffa}, 0x2}) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f00000000c0)=""/148, &(0x7f0000000180)=0x94) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x800, 0x80006d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x1c) process_mrelease(r3, 0x0) listen(r0, 0x3f) shutdown(r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffff) [ 1439.061391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1439.080486] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:25:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:25:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffffc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:51 executing program 1: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc050000", @ANYRES16=0x0, @ANYBLOB="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"], 0x5cc}, 0x1, 0x0, 0x0, 0x800}, 0x104) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000700)=0x4) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0, 0xc0}], 0x1, 0x0) 00:25:51 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(0xffffffffffffffff, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:25:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:25:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:25:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1455.001311] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1455.006335] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1455.031183] cgroup: fork rejected by pids controller in /syz6 00:25:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:25:51 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(0xffffffffffffffff, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:25:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1455.183861] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:51 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x80000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) listen(r3, 0x80000000) shutdown(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x4, 0x4, 0xa, 0x5, 0x1, 0xfc}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:25:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:25:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1457.631533] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1457.635558] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1457.636825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1457.646346] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1457.651283] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1457.656573] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1459.695008] Bluetooth: hci7: command 0x0409 tx timeout [ 1461.745964] Bluetooth: hci7: command 0x041b tx timeout [ 1463.791955] Bluetooth: hci7: command 0x040f tx timeout [ 1465.838951] Bluetooth: hci7: command 0x0419 tx timeout [ 1467.343333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.344516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.347161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1467.375105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.376254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.378268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1467.576300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:26:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(0xffffffffffffffff, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:26:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000004, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:26:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) clock_gettime(0x0, &(0x7f0000002e40)={0x0, 0x0}) connect$bt_sco(r0, &(0x7f0000003080)={0x1f, @none}, 0x8) epoll_pwait2(0xffffffffffffffff, &(0x7f00000015c0)=[{}, {}, {}, {}], 0x4, &(0x7f0000002ec0)={0x77359400}, &(0x7f0000002f00)={[0x8]}, 0x8) recvmmsg(r0, &(0x7f0000002d40)=[{{&(0x7f00000010c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001200)=""/94, 0x5e}], 0x2, &(0x7f0000001280)=""/96, 0x60}, 0x3}, {{&(0x7f0000001300)=@caif=@util, 0x80, &(0x7f0000001840)=[{&(0x7f0000001380)=""/36, 0x24}, {&(0x7f00000013c0)=""/82, 0x52}, {&(0x7f0000001440)=""/47, 0x2f}, {&(0x7f0000001480)=""/33, 0x21}, {&(0x7f00000014c0)=""/123, 0x7b}, {&(0x7f0000001540)=""/103, 0x67}, {&(0x7f0000001640)=""/132, 0x84}, {&(0x7f0000001700)=""/75, 0x4b}, {&(0x7f0000001780)=""/146, 0x92}], 0x9, &(0x7f0000001900)=""/140, 0x8c}, 0x2}, {{&(0x7f00000019c0)=@nl=@proc, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000015c0)}, {&(0x7f0000001a40)=""/72, 0x48}], 0x2, &(0x7f0000001b00)=""/78, 0x4e}, 0x2}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/94, 0x5e}, {&(0x7f0000002c00)=""/123, 0x7b}, {&(0x7f0000002c80)=""/125, 0x7d}], 0x4}, 0x1}], 0x4, 0x40000002, &(0x7f0000002e80)={r1, r2+60000000}) readlink(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)=""/251, 0xfb) 00:26:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:26:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:26:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none}, 0x8) [ 1483.509308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:26:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="c00e0000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:26:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="e03f0300", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:26:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:26:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="c00e0000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) bind$bt_sco(r1, &(0x7f0000001600), 0x8) listen(r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) shutdown(r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x6, 0x0, &(0x7f0000000180)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000080)={0x6, 'bond_slave_1\x00', {0x7}, 0x8}) poll(&(0x7f0000000000)=[{r3, 0x1000}, {r4, 0xa000}, {r0, 0xfa}], 0x3, 0x0) 00:26:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="e03f0300", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:26:20 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:26:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1485.935022] Bluetooth: hci7: command 0x0405 tx timeout [ 1486.468589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1486.476974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1486.479672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1486.491596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1486.493036] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1486.494067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1488.558948] Bluetooth: hci1: command 0x0409 tx timeout [ 1490.607337] Bluetooth: hci1: command 0x041b tx timeout [ 1492.655926] Bluetooth: hci1: command 0x040f tx timeout [ 1494.703443] Bluetooth: hci1: command 0x0419 tx timeout [ 1496.644185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.645633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.648007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1496.676358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.678919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.681687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:26:49 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:26:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="00f0ff7f", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:26:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:49 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, 0x0, 0x0) 00:26:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) listen(r1, 0x9) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:26:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="00f0ff7f", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:26:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1514.929323] Bluetooth: hci1: command 0x0405 tx timeout [ 1517.231752] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1521.519962] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1525.871257] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1530.227975] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1534.510951] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1538.864101] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1543.152103] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1547.504245] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1549.758070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1549.759678] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1549.761059] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1549.763521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1549.764894] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1549.766093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1551.791012] Bluetooth: hci2: command 0x0409 tx timeout [ 1553.850873] Bluetooth: hci2: command 0x041b tx timeout [ 1555.890950] Bluetooth: hci2: command 0x040f tx timeout [ 1557.937063] Bluetooth: hci2: command 0x0419 tx timeout [ 1559.419072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.420256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.423660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1559.450021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.451214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.453226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:27:51 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) listen(r1, 0x1) shutdown(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x1) 00:27:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:27:51 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:27:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:27:51 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, 0x0, 0x0) 00:27:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:27:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:27:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1575.345072] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. 00:27:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:27:52 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, 0x0, 0x0) 00:27:52 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:27:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="00f0ffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:27:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="00f0ffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:27:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x6, &(0x7f0000000000)=0x2) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:27:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:27:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1575.537989] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1577.391923] Bluetooth: hci2: command 0x0405 tx timeout [ 1580.465011] Bluetooth: hci7: command 0x0406 tx timeout 00:28:08 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) listen(r1, 0x1) shutdown(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x1) 00:28:08 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:28:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:28:08 executing program 0: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:08 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) listen(r1, 0x1) shutdown(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x1) 00:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:08 executing program 0: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/processor', 0x0, 0x1) listen(r1, 0x6) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:28:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) listen(r1, 0x1) shutdown(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x1) 00:28:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="c00e0000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7a000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="e03f0300", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c050000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:25 executing program 0: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) listen(r1, 0x1) shutdown(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:28:25 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)={0x4, 0x7ff}) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 1608.852245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 00:28:25 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) listen(r1, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:28:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c060000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c050000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="00f0ff7f", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:25 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) poll(&(0x7f0000000000)=[{r1}, {r1, 0x4000}], 0x2, 0x0) 00:28:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) listen(r1, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:28:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c060000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:25 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 1609.137628] Bluetooth: hci1: command 0x0406 tx timeout 00:28:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:42 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\a\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\a\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:42 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) listen(r1, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:28:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="00f0ffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x7) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x6802, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000040)) 00:28:42 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\t\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:57 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) shutdown(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:28:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) sendto(r0, &(0x7f00000000c0)="ca0e1eab3f726ae43d6c3748cfbba6963c27cd97e84ebed3bd895a8c31501de2286bbf028cc5d2150f50ed361a006c6fdd43f349a3553dea88bc9f1ee2fa3a7b08c00df917e90899d45c7382b3a8430a2fccab344c27e6ecda987b6e94065f094466f927d72c747c86d342d8db816ed81c2995a13b9d32b2dcc29d45521df1d815f12b6ee119d89bc2583060", 0x8c, 0x0, 0x0, 0x0) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) poll(&(0x7f00000001c0)=[{r0, 0x11f9}, {r2, 0x2108}, {r1, 0x5100}, {r0, 0x76e69e239a90a455}, {0xffffffffffffffff, 0x2}], 0x0, 0x6) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 00:28:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:28:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0f0000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\t\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:28:57 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:28:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x9040}], 0x1, 0x0) [ 1643.460228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1643.470576] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1643.478064] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1643.493776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1643.501759] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1643.507410] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1645.550886] Bluetooth: hci5: command 0x0409 tx timeout [ 1647.601790] Bluetooth: hci5: command 0x041b tx timeout [ 1649.647478] Bluetooth: hci5: command 0x040f tx timeout [ 1651.694883] Bluetooth: hci5: command 0x0419 tx timeout [ 1652.972370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.973557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.975860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1653.012870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.014090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.016294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:29:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',H\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:29:25 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:29:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0f0000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c050000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4c000000, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:29:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1668.645438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 00:29:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:29:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:29:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c060000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',H\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:25 executing program 5: shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:29:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:29:25 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)=@llc={0x1a, 0x30d, 0x7, 0x0, 0x9, 0x5, @multicast}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)="f4bae561221eec1cb2d5e8772525cfd78c3e3059241be0d4e89fcc415b913b346aaeae8481346cc7c50ec5646e11af2905913387d1ce080e8813c46260d0a3bc33e4d1bb04c466bcf7e84eba8d05c7c6ae875d0ec134b697a70f13e293a83c89b15c51f192609d3b724b7580759cb9d5ba0320002a04aab1c7a1ff63a8e652e059b8dac087a085278f1fc38f609690ef701368f750b8db386d6f3285575b9e4372089650d6288863a081", 0xaa}, {&(0x7f0000000180)="ec3b63da081eaf023ebca8e015380870e0f11f02ba93a4a0a594843419a6ee9eda68aa8bfc97093d50565a7d9ba9bc8a2e6ae4c448f8bb2d935a012cfc70311d1846ae0a250fc89487d3c41143d3b491d0715a70bdb4ad7fd28cfa", 0x5b}, {&(0x7f0000000200)="c25650d54ac18169678d29452a7f8ef433513f3748e1a4dab46f3da81b5c570db761286cbeabab7001f62c0f26d73a13c5a9f5a927e657357154bcab1f9a38419b34b30acd57a4187ed12256fb37f397e5ef60be001f9f7063e753ba997b74bde2d24716e7db8a1e415e852d48193919b7c41f06203955487d153324233ce8eb01759198d301efd4400509b8927e7f3bb80ecffbaf17b84ff1fb69826ea38c4a889551218bd5d57ba03df0b03201a524ce74aac0f5cd0b63fe11b539d25df2a37b6ed8a05a4e84eddc30870964c48b53337ead827f15cbe6ec64f68d67843c9a52e3ec39c24e3fe6e887b503a39faa267c39fee331a1571d96", 0xf9}, {&(0x7f0000000300)="de71ae139f174192603d1b35edae2fc2953bd8474d1b997bb35aae83ae262006c0c835ea71e719032d255380923ae859ec37257c7db22c1ee23ff5687265e6e37645271bbfecbd74de83ca00eb7eb66a153c5577ee76d85eff883d053a9cbe3e09d0206bbd0abf384b3e4ff8947fc728a33847b518730d7c8195890f9f76ca4df256df9e88c974490bb26cdd194c1e42ac36004b4bd2184ecbb7d2aad9056cc6af7acc39c9bed596a93674c61025b101297db66ede31d2dad3e826c60e01da2c237d7626996b2d807a", 0xc9}, {&(0x7f0000000400)="8e02bc6600745d564b62c1", 0xb}, {&(0x7f0000000440)="2944757db5af9884881bb3c90f9cf2927dc3", 0x12}], 0x6, &(0x7f0000000500)=[{0xa0, 0x10c, 0x1, "bc111018a424d62881697562bd3ac00720d57a68aaf4aab783800860941bd1c0d59242b3f7aee2c6e528834307b0f2b8c0ff7c7a835b72f174a052fec8751e0fae2595e986e8a7569995f9da29074fbefcfa38abf5b918dcad8f5d18e59c37777fbe0ab040e23618ce3e4c221f80f1a49264e1e9be97c554bdfc42081aef190468d228e285fb46ff1740dfcb272d06"}, {0x58, 0x10b, 0x8, "7d729b2f63e8de31d6f83ddce4779c7fffdde6a66fcf517cfb5c68fea312b2292a7cd6b649a6d8ae64e04a7c9e3b99402648b9b55d076824932e23465d972eeab9714ebad0416c21"}, {0x110, 0x108, 0x0, "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"}], 0x208}}], 0x1, 0x41) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:29:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',L\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1674.671009] Bluetooth: hci2: command 0x0406 tx timeout 00:29:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',h\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:29:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',L\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:29:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\a\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:41 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x154) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:29:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:41 executing program 5: shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) [ 1684.677736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 00:29:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',l\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',h\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:41 executing program 5: shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:29:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:29:41 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) shutdown(r0, 0x0) shutdown(r0, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) accept4(r0, &(0x7f0000000280)=@can, &(0x7f0000000000)=0x80, 0x800) 00:29:41 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) bind$bt_sco(r2, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) write$nbd(r3, &(0x7f00000000c0)={0x67446698, 0x1, 0x1, 0x4, 0x1, "6e244592d82e2ca4a32b370b05900cf291033666b4ec9b466a628f6b6ab8e2ad7b26482e57fbde56c124051c27f352a18853944589c252bcc3d76b679c39070b26b7a6adafdac638d47d4d2dc3ca2a78463a2a7c6ac558e71a64c34f264c4bb32b6ac7fd7c58b9b16fcddad4aaa917abe87596bcd306ab5bf40d758da17b86"}, 0x8f) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000180)={0xfffffff8, {{0xa, 0x4e23, 0x8, @empty, 0x3}}, {{0xa, 0x4e20, 0xa84, @remote, 0xd5}}}, 0x108) 00:29:57 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:29:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:29:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x1]}, 0x8, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000fddbdf250500000008000300", @ANYRES32=r4, @ANYBLOB="0c0000000000000000000000747bfa9849961db696a012f167d561fb9e712364fb4cfea242663fa554f003e3b07bdf1147e491c376613123b522279c324693c2c92a679f6cfd8e3fb63f62760ba8fb18a4b30d846d8152d1da3ac64fd510f4a6df0fadcf013679fc3daea184235a0b65e8545dc6f48046476e8594a79fa44f1fb41f16"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x40880) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x7]}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xdf9]}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x387}, @SEG6_ATTR_SECRET={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000001}, 0x20004080) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000000380)) 00:29:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:29:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',t\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',l\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6800, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\t\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1700.911386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 00:29:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',t\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1700.935588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:29:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 1700.966237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:29:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0f0000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',z\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:29:57 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:29:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',z\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1701.091627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 00:29:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, r2, 0x0) r3 = fork() tkill(r3, 0x12) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x2a63e911d64971b6, &(0x7f0000000340)) listen(r0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x6, 0x0, &(0x7f0000000180)) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}, {r6, 0x1}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x200}}, './cgroup/cgroup.procs\x00'}) getsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r8 = accept(r5, &(0x7f0000000100)=@hci, &(0x7f00000001c0)=0x80) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) 00:29:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:30:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2ce90000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:13 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:30:13 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x7fffffff, 0x0, 0x2, 0x1000, 0x101, 0x100000001}, {0x600000, 0x3, 0x3f, 0xdc16, 0xfffffffffffffff7, 0x3f}], ['\x00', '\x00', '\x00']}) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:30:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 00:30:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',H\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:30:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cf00000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:13 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:30:13 executing program 1: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x0, 0x6}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) shutdown(r0, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) poll(&(0x7f0000000080)=[{r0, 0x42}, {r1, 0x180}], 0x2, 0x0) 00:30:13 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:30:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000300", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:13 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:30:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cf00000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',L\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1719.548676] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1719.551185] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1719.553664] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1719.557722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1719.560503] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1719.563736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1721.583895] Bluetooth: hci6: command 0x0409 tx timeout [ 1723.631281] Bluetooth: hci6: command 0x041b tx timeout [ 1725.680052] Bluetooth: hci6: command 0x040f tx timeout [ 1727.347351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.349077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.352699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1727.434686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.436587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.439914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1727.727465] Bluetooth: hci6: command 0x0419 tx timeout 00:30:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 00:30:38 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 00:30:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000300", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',h\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:30:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:38 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:30:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) 00:30:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:30:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',l\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'batadv0\x00', 0x8000}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:30:38 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 00:30:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000600", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:30:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',t\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:52 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 00:30:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 00:30:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x2) listen(r0, 0x0) shutdown(r0, 0x0) fcntl$dupfd(r0, 0xe349b5abad9a32c8, r0) socketpair(0x1a, 0x4, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040), &(0x7f00000000c0)) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:30:52 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:30:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000600", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',z\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\a\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\t\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cf00000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\a\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cbf0c00", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:52 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 00:30:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:30:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c040100", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:30:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:30:52 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 1768.878846] Bluetooth: hci5: command 0x0406 tx timeout 00:31:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) shutdown(r2, 0x0) 00:31:08 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf25420000000a0006006eeb579005e700001539b9bc17e8c4f66cc47112b462b9acb23d62d7c420ddb1cbe88bc91b0ef34b6f07aeaeca3403dfe2"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000001600), 0x8) fspick(r0, &(0x7f0000000240)='./file0\x00', 0x0) listen(r1, 0x0) shutdown(r1, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x568, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x2d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa5}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '4'}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "9f234d4d78"}, @NL80211_ATTR_FILS_ERP_REALM={0x25, 0xfa, "16bfff52dd4a64d7ad65855ac70a59a3371920cf9c48f1888a1f8c586d232774d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "6d2f8151566b654719c80825"}, @NL80211_ATTR_FILS_ERP_REALM={0x89, 0xfa, "bee206029f5d988947893186bf2467b7d55b28b14ebad15ea5f0f8146dd2f91406bcc95841befb7a5ad00642edd3ba8255b587acad4dc1a39f93580af0b0e4667c3c06ca476018b13383fda0d8dcc8180106f254f1838a74c8a2e5185daa3b5c0ae11723e552f04707a22d719d8262cf3ae470bb398891555a13fddaec35c109ec7e825118"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "87b7cfb61bc84ea6f13ce16f"}, @NL80211_ATTR_FILS_ERP_RRK={0xfa, 0xfc, "6b94ec4b7eeb36b1f7fd00a1065f1da7143071ba72f0860ed17c47655e9c565e0db01be2f33645859a27b087ff6ef6823d1556a4f7b66f2104d64ceedb02250a4f0b83e99386faf28011bac28cabdb8c782080de97da472f5760cfc5ac2575b15768d54a4fbd23e7a3fd2425f0058d4bfb196c531d59ec4d03e58593b53025cefcff18fb02bda899ddeeddf0368e5f6c120e83de0bada872ca0c064ce778189adb987db308583140a2550ab05db3539c599e52efaa29e6947fe43034ce4ac3dddb1a79aff7e69258f6e48df531e20db8de03632d07fad5da89c879c05c624e4ec14a1171fbc2d059fa321ba0e03bfecb56bb4726564b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "f6bf7d"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "c65ae4d7425d1cafa8217456511d5e3b4b0e082f42449384e9110e523a99239edd96c0d7b7ce47822dede5f8798f5f57fa719a5420eb92b7a9867ff7ac2ce76ed5c46e5469c3976355a4c8b8c40f6102752fcb7d584982f40c5ca6bb4a623235a16a95b654762845d1a19453ea720b7160ce44fe6f9227a30bfb6c499e81319ab2893f4d9e0ed45ce71cceb444f34533b969464a145d023610b9f15406866216a14b5e5cb74cc03162e3be57020b7e15c5603810b2fd11ec25a1288376694e4d4c554059e61c05943c800b72c465b98b6cfda0"}, @NL80211_ATTR_FILS_ERP_REALM={0x36, 0xfa, "38d46a70f5ce8f5ddf7e016d0aaf0ff261dd6a7cec73b5bf766f226a289b177c8a3e45c62e27925be98506240084386a8720"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "d03cfbfb27af0cf7afc3a1c8eea0c10a85f378ea7bcc24d943250b2c27cee5a8c9144229d0e8a0f28f235310f08e52a1"}], @NL80211_ATTR_IE={0x1f6, 0x2a, [@measure_req={0x26, 0xbc, {0x2, 0x40, 0x4, "02f742ef46a3fac1580075d1d1dc76f196247d1618acd17104b2e8cff352abd435f6ed83888a30f8a6981156436c651564b8619f63000da23570ff771b50c41923686b05623a3fe6c644742bd3f5efea7b569098882e4eb6b97771110b822cfe189a382e0e1525f32113e98629163f480d0692f445dd62b75132d1e9f58a0ceb0194547c0d306cfe967a4aedd6e5addfb317b617df171867989c632b657986a48ba86f14e5c3ad2c150bc927ccd5bec4f5b6ce79e86fadc2a7"}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x1, @device_a, 0x7, @device_a, 0x9, 0x3ff, @device_a, 0x1}}, @dsss={0x3, 0x1, 0x78}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x38}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xeb, {0x1, 0x0, 0x40, "7b77f9df54e0dee8276fc83123ca719b415cf50ff1841d78e3f7d7fd4ce3eb618357240c276681aa72d0b92e8c1980219753f057e7f6bb3ee2530872dc93c70efc69da721f87045e69d31d6308c001759fb700c1940134e7e3ef6c080a1d667a2e09e4fabfe2b23ab8076e67c716f141c2f17643dad9cae7aaea97de52ef52bdfa0efdb7e50470567d1ae05f57fb7deb1c1ff0441413df7e1112c7e5c44dc06a2d270a0785b45a8b49bcef4c55310d41b2404087e6d41d1a4018c99a7f7da7c66b8f5f56bca47e2b9f09e9ff1ea9a61ce3a1ff60bc1dad488d2211e80c612f05c340915a81908ee2"}}, @ibss={0x6, 0x2, 0x990d}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "92472ff6eda53d29a288"}]]}, 0x568}, 0x1, 0x0, 0x0, 0x20048004}, 0x40044) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000080)=0x80) poll(&(0x7f0000000140)=[{r2, 0x6202}, {r1, 0x70c0}, {r2, 0xff24386a6c124747}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @in_args={0x2}}, './file0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 00:31:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000f00", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000300", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\t\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:08 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:31:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00H\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r3}}, 0xa3) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) io_uring_enter(r5, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000006200000001000000ffffffff080000000400000000000000"], 0x400) 00:31:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',!\r\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:09 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:31:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00L\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000f00", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000600", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:25 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0x0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:31:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\r!\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00h\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\a\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\t\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00l\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00H\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:25 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r2}}, 0xa3) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) io_uring_enter(r4, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x300, 0x0, 0x37) 00:31:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 1) 00:31:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:25 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) (fail_nth: 1) 00:31:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c210e00", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1789.126609] FAULT_INJECTION: forcing a failure. [ 1789.126609] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1789.128587] CPU: 1 PID: 14844 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1789.129674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1789.131135] Call Trace: [ 1789.131477] [ 1789.131805] dump_stack_lvl+0x8b/0xb3 [ 1789.132331] should_fail.cold+0x5/0xa [ 1789.132851] prepare_alloc_pages+0x17b/0x500 [ 1789.133447] ? mark_lock.part.0+0xef/0x2f60 [ 1789.134027] __alloc_pages+0x131/0x4e0 [ 1789.134554] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1789.135346] ? __lock_acquire+0xbac/0x6120 [ 1789.135993] alloc_pages+0x1a0/0x2f0 [ 1789.136485] __pmd_alloc+0x37/0x680 [ 1789.136972] __handle_mm_fault+0xecf/0x35e0 [ 1789.137561] ? lock_is_held_type+0xd7/0x130 [ 1789.138163] ? __pmd_alloc+0x680/0x680 [ 1789.138700] handle_mm_fault+0x2e6/0xa20 [ 1789.139248] do_user_addr_fault+0x54a/0x12a0 [ 1789.139880] exc_page_fault+0xa2/0x1a0 [ 1789.140444] asm_exc_page_fault+0x1e/0x30 [ 1789.141021] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1789.141710] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1789.144190] RSP: 0018:ffff888041647af8 EFLAGS: 00050297 [ 1789.144913] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1789.145859] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1789.146817] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1789.147874] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800e140000 [ 1789.149464] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff888043d99140 [ 1789.151351] ? bt_sock_ioctl+0x146/0x2e0 [ 1789.152641] bt_sock_ioctl+0x151/0x2e0 [ 1789.153679] sock_do_ioctl+0xd2/0x230 [ 1789.154707] ? put_user_ifreq+0xb0/0xb0 [ 1789.155828] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1789.156541] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1789.157207] sock_ioctl+0x41c/0x670 [ 1789.157723] ? br_ioctl_call+0xb0/0xb0 [ 1789.158277] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1789.159039] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1789.159849] ? avc_has_perm+0x108/0x1b0 [ 1789.161206] ? br_ioctl_call+0xb0/0xb0 [ 1789.162516] do_vfs_ioctl+0x577/0x1610 [ 1789.163821] ? vfs_fileattr_set+0xb80/0xb80 [ 1789.164561] FAULT_INJECTION: forcing a failure. [ 1789.164561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.165167] ? lock_is_held_type+0xd7/0x130 [ 1789.167440] ? inode_has_perm+0x171/0x1d0 [ 1789.168038] ? lock_release+0x3b2/0x750 [ 1789.168593] ? file_has_perm+0x183/0x270 [ 1789.169159] ? inode_has_perm+0x1d0/0x1d0 [ 1789.169746] ? selinux_file_ioctl+0xb1/0x260 [ 1789.170364] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1789.171124] __x64_sys_ioctl+0x108/0x210 [ 1789.171691] do_syscall_64+0x3b/0x90 [ 1789.172240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1789.172949] RIP: 0033:0x7fab6351eb19 [ 1789.173451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1789.175951] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1789.176983] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1789.177942] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1789.178915] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1789.179944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.180894] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1789.181870] [ 1789.182198] CPU: 0 PID: 14847 Comm: syz-executor.1 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1789.183390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1789.184931] Call Trace: [ 1789.185287] [ 1789.185612] dump_stack_lvl+0x8b/0xb3 [ 1789.186148] should_fail.cold+0x5/0xa [ 1789.188204] _copy_from_user+0x2a/0x170 [ 1789.188872] move_addr_to_kernel.part.0+0x31/0x110 [ 1789.189665] __sys_connect+0xda/0x190 [ 1789.190318] ? __sys_connect_file+0x190/0x190 [ 1789.191027] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1789.191902] ? vfs_write+0x422/0xac0 [ 1789.192491] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1789.193355] ? fput+0x2a/0x50 [ 1789.193857] __x64_sys_connect+0x6f/0xb0 [ 1789.194499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1789.195311] do_syscall_64+0x3b/0x90 [ 1789.195906] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1789.196689] RIP: 0033:0x7f142056fb19 [ 1789.197258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1789.200067] RSP: 002b:00007f141dae5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1789.201022] RAX: ffffffffffffffda RBX: 00007f1420682f60 RCX: 00007f142056fb19 [ 1789.201973] RDX: 0000000000000008 RSI: 00000000200001c0 RDI: 0000000000000004 [ 1789.202864] RBP: 00007f141dae51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1789.203782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.204679] R13: 00007fffef8bc8ff R14: 00007f141dae5300 R15: 0000000000022000 [ 1789.205612] 00:31:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00t\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000f00", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00L\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) (fail_nth: 2) 00:31:42 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r2}}, 0xa3) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) io_uring_enter(r4, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x300, 0x0, 0x37) 00:31:42 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 2) [ 1805.405955] FAULT_INJECTION: forcing a failure. [ 1805.405955] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.407601] CPU: 0 PID: 14972 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1805.408834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1805.410738] Call Trace: [ 1805.411134] [ 1805.411473] dump_stack_lvl+0x8b/0xb3 [ 1805.412071] should_fail.cold+0x5/0xa [ 1805.412638] ? __pmd_alloc+0x94/0x680 [ 1805.413220] should_failslab+0x5/0x10 [ 1805.413806] kmem_cache_alloc+0x5b/0x480 [ 1805.414431] ? alloc_pages+0x1a8/0x2f0 [ 1805.415035] __pmd_alloc+0x94/0x680 [ 1805.415615] __handle_mm_fault+0xecf/0x35e0 [ 1805.416322] ? lock_is_held_type+0xd7/0x130 [ 1805.416981] ? __pmd_alloc+0x680/0x680 [ 1805.417599] handle_mm_fault+0x2e6/0xa20 [ 1805.418209] do_user_addr_fault+0x54a/0x12a0 [ 1805.418901] exc_page_fault+0xa2/0x1a0 [ 1805.419485] asm_exc_page_fault+0x1e/0x30 [ 1805.420112] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1805.420857] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1805.423526] RSP: 0018:ffff88804889faf8 EFLAGS: 00050297 [ 1805.424319] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1805.425344] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1805.426430] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1805.427487] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888042897000 [ 1805.428588] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff888043d89700 [ 1805.429680] ? bt_sock_ioctl+0x146/0x2e0 [ 1805.430321] bt_sock_ioctl+0x151/0x2e0 [ 1805.430932] sock_do_ioctl+0xd2/0x230 [ 1805.431534] ? put_user_ifreq+0xb0/0xb0 [ 1805.432193] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1805.432966] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1805.433675] sock_ioctl+0x41c/0x670 [ 1805.434235] ? br_ioctl_call+0xb0/0xb0 [ 1805.434837] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1805.435643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1805.436452] ? avc_has_perm+0x108/0x1b0 [ 1805.437006] ? br_ioctl_call+0xb0/0xb0 [ 1805.437535] do_vfs_ioctl+0x577/0x1610 [ 1805.438077] ? vfs_fileattr_set+0xb80/0xb80 [ 1805.438673] ? lock_is_held_type+0xd7/0x130 [ 1805.439285] ? inode_has_perm+0x171/0x1d0 [ 1805.439852] ? lock_release+0x3b2/0x750 [ 1805.440423] ? file_has_perm+0x183/0x270 [ 1805.440975] ? inode_has_perm+0x1d0/0x1d0 [ 1805.441555] ? selinux_file_ioctl+0xb1/0x260 [ 1805.442162] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1805.442904] __x64_sys_ioctl+0x108/0x210 [ 1805.443444] do_syscall_64+0x3b/0x90 [ 1805.443992] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1805.444741] RIP: 0033:0x7fab6351eb19 [ 1805.445267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1805.447705] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1805.448927] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1805.449877] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1805.450792] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1805.451682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1805.452622] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1805.453537] 00:31:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0e2100", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00z\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00h\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:42 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 3) [ 1805.620615] FAULT_INJECTION: forcing a failure. [ 1805.620615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1805.622264] CPU: 1 PID: 14978 Comm: syz-executor.1 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1805.623351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1805.624880] Call Trace: [ 1805.625226] [ 1805.625523] dump_stack_lvl+0x8b/0xb3 [ 1805.626041] should_fail.cold+0x5/0xa [ 1805.626566] _copy_to_user+0x2a/0x140 [ 1805.627077] simple_read_from_buffer+0xcc/0x160 [ 1805.627692] proc_fail_nth_read+0x194/0x220 [ 1805.628319] ? proc_exe_link+0x1d0/0x1d0 [ 1805.628871] ? security_file_permission+0xb1/0xd0 [ 1805.629518] ? proc_exe_link+0x1d0/0x1d0 [ 1805.630066] vfs_read+0x1ea/0x5d0 [ 1805.630557] ksys_read+0x127/0x250 [ 1805.631039] ? __ia32_sys_pwrite64+0x220/0x220 [ 1805.631673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1805.632436] do_syscall_64+0x3b/0x90 [ 1805.632957] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1805.633665] RIP: 0033:0x7f142052269c [ 1805.634171] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1805.636670] RSP: 002b:00007f141dae5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1805.637713] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f142052269c [ 1805.638677] RDX: 000000000000000f RSI: 00007f141dae51e0 RDI: 0000000000000003 [ 1805.639646] RBP: 00007f141dae51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1805.640645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1805.641604] R13: 00007fffef8bc8ff R14: 00007f141dae5300 R15: 0000000000022000 [ 1805.642579] 00:31:42 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48681, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x139b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x100, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r2}}, 0xa3) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) io_uring_enter(r4, 0x4275, 0xb04, 0x3, &(0x7f00000000c0)={[0x8]}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x80000004, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000140)=""/101, 0x65, 0x62, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x300, 0x0, 0x37) [ 1805.695886] FAULT_INJECTION: forcing a failure. [ 1805.695886] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.697576] CPU: 0 PID: 15092 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1805.698765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1805.700341] Call Trace: [ 1805.700694] [ 1805.700997] dump_stack_lvl+0x8b/0xb3 [ 1805.701596] should_fail.cold+0x5/0xa [ 1805.702196] ? create_object.isra.0+0x3a/0xa20 [ 1805.702916] should_failslab+0x5/0x10 [ 1805.703488] kmem_cache_alloc+0x5b/0x480 [ 1805.704129] create_object.isra.0+0x3a/0xa20 [ 1805.704808] ? kasan_unpoison+0x23/0x50 [ 1805.705399] kmem_cache_alloc+0x239/0x480 [ 1805.706015] __pmd_alloc+0x94/0x680 [ 1805.706583] __handle_mm_fault+0xecf/0x35e0 [ 1805.707256] ? lock_is_held_type+0xd7/0x130 [ 1805.707928] ? __pmd_alloc+0x680/0x680 [ 1805.708592] handle_mm_fault+0x2e6/0xa20 [ 1805.709220] do_user_addr_fault+0x54a/0x12a0 [ 1805.709959] exc_page_fault+0xa2/0x1a0 [ 1805.710577] asm_exc_page_fault+0x1e/0x30 [ 1805.711206] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1805.711909] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1805.714684] RSP: 0018:ffff8880436c7af8 EFLAGS: 00050297 [ 1805.715507] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1805.716615] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1805.717667] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1805.718714] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88804216e000 [ 1805.719810] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff88800b83bf40 [ 1805.720931] ? bt_sock_ioctl+0x146/0x2e0 [ 1805.721567] bt_sock_ioctl+0x151/0x2e0 [ 1805.722123] sock_do_ioctl+0xd2/0x230 [ 1805.722748] ? put_user_ifreq+0xb0/0xb0 [ 1805.723361] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1805.724150] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1805.724879] sock_ioctl+0x41c/0x670 [ 1805.725435] ? br_ioctl_call+0xb0/0xb0 [ 1805.726045] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1805.726871] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1805.727706] ? avc_has_perm+0x108/0x1b0 [ 1805.728346] ? br_ioctl_call+0xb0/0xb0 [ 1805.728964] do_vfs_ioctl+0x577/0x1610 [ 1805.729562] ? vfs_fileattr_set+0xb80/0xb80 [ 1805.730211] ? lock_is_held_type+0xd7/0x130 [ 1805.730888] ? inode_has_perm+0x171/0x1d0 [ 1805.731547] ? lock_release+0x3b2/0x750 [ 1805.732172] ? file_has_perm+0x183/0x270 [ 1805.732796] ? inode_has_perm+0x1d0/0x1d0 [ 1805.733428] ? selinux_file_ioctl+0xb1/0x260 [ 1805.734096] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1805.734939] __x64_sys_ioctl+0x108/0x210 [ 1805.735580] do_syscall_64+0x3b/0x90 [ 1805.736186] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1805.736970] RIP: 0033:0x7fab6351eb19 [ 1805.737528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1805.740279] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1805.741431] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1805.742523] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1805.743595] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1805.744658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1805.745716] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1805.746805] 00:31:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x9, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0cbf00", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00H\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:31:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00l\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 00:31:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:31:57 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 4) 00:31:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00f000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 1821.344200] FAULT_INJECTION: forcing a failure. [ 1821.344200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1821.346028] CPU: 1 PID: 15213 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1821.347142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1821.348728] Call Trace: [ 1821.349115] [ 1821.349469] dump_stack_lvl+0x8b/0xb3 [ 1821.350059] should_fail.cold+0x5/0xa [ 1821.350653] prepare_alloc_pages+0x17b/0x500 [ 1821.351349] __alloc_pages+0x131/0x4e0 [ 1821.351951] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1821.352898] ? lock_is_held_type+0xd7/0x130 [ 1821.353569] ? find_held_lock+0x2c/0x110 [ 1821.354214] alloc_pages+0x1a0/0x2f0 [ 1821.354798] pte_alloc_one+0x16/0x1f0 [ 1821.355399] __pte_alloc+0x69/0x200 [ 1821.356019] ? pmd_install+0x250/0x250 [ 1821.356680] ? do_raw_spin_unlock+0x4f/0x210 [ 1821.357731] ? _raw_spin_unlock+0x24/0x40 [ 1821.358372] ? __pmd_alloc+0x30d/0x680 [ 1821.358981] __handle_mm_fault+0x2550/0x35e0 [ 1821.359683] ? lock_is_held_type+0xd7/0x130 [ 1821.360371] ? __pmd_alloc+0x680/0x680 [ 1821.360991] handle_mm_fault+0x2e6/0xa20 [ 1821.361577] do_user_addr_fault+0x54a/0x12a0 [ 1821.362207] exc_page_fault+0xa2/0x1a0 [ 1821.362838] asm_exc_page_fault+0x1e/0x30 [ 1821.363493] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1821.364298] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1821.367016] RSP: 0018:ffff888040eafaf8 EFLAGS: 00050297 [ 1821.367807] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1821.368898] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1821.370030] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1821.371143] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880208d2000 [ 1821.372311] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff888043d34ac0 [ 1821.373461] ? bt_sock_ioctl+0x146/0x2e0 [ 1821.374093] bt_sock_ioctl+0x151/0x2e0 [ 1821.374737] sock_do_ioctl+0xd2/0x230 [ 1821.375376] ? put_user_ifreq+0xb0/0xb0 [ 1821.376021] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1821.376843] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1821.377580] sock_ioctl+0x41c/0x670 [ 1821.378142] ? br_ioctl_call+0xb0/0xb0 [ 1821.378768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1821.379659] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1821.380559] ? avc_has_perm+0x108/0x1b0 [ 1821.381185] ? br_ioctl_call+0xb0/0xb0 [ 1821.381797] do_vfs_ioctl+0x577/0x1610 [ 1821.382438] ? vfs_fileattr_set+0xb80/0xb80 [ 1821.383123] ? lock_is_held_type+0xd7/0x130 [ 1821.383792] ? inode_has_perm+0x171/0x1d0 [ 1821.384422] ? lock_release+0x3b2/0x750 [ 1821.385023] ? file_has_perm+0x183/0x270 [ 1821.385618] ? inode_has_perm+0x1d0/0x1d0 [ 1821.386272] ? selinux_file_ioctl+0xb1/0x260 [ 1821.386944] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1821.387769] __x64_sys_ioctl+0x108/0x210 [ 1821.388412] do_syscall_64+0x3b/0x90 [ 1821.388975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1821.389751] RIP: 0033:0x7fab6351eb19 [ 1821.390349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1821.393073] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1821.394167] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1821.395195] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1821.396156] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1821.397102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1821.398059] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1821.399098] 00:31:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x7) 00:31:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00t\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000003", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00L\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:31:58 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 5) [ 1821.636896] FAULT_INJECTION: forcing a failure. [ 1821.636896] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.639365] CPU: 0 PID: 15241 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1821.640964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1821.642477] Call Trace: [ 1821.642836] [ 1821.643146] dump_stack_lvl+0x8b/0xb3 [ 1821.643681] should_fail.cold+0x5/0xa [ 1821.644211] ? ptlock_alloc+0x1d/0x70 [ 1821.645415] should_failslab+0x5/0x10 [ 1821.646630] kmem_cache_alloc+0x5b/0x480 [ 1821.647203] ptlock_alloc+0x1d/0x70 [ 1821.647713] pte_alloc_one+0x68/0x1f0 [ 1821.648250] __pte_alloc+0x69/0x200 [ 1821.648760] ? pmd_install+0x250/0x250 [ 1821.649295] ? do_raw_spin_unlock+0x4f/0x210 [ 1821.649901] ? _raw_spin_unlock+0x24/0x40 [ 1821.650503] ? __pmd_alloc+0x30d/0x680 [ 1821.651043] __handle_mm_fault+0x2550/0x35e0 [ 1821.651647] ? lock_is_held_type+0xd7/0x130 00:31:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00z\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1821.652239] ? __pmd_alloc+0x680/0x680 [ 1821.652903] handle_mm_fault+0x2e6/0xa20 [ 1821.653493] do_user_addr_fault+0x54a/0x12a0 [ 1821.654113] exc_page_fault+0xa2/0x1a0 [ 1821.654651] asm_exc_page_fault+0x1e/0x30 [ 1821.655224] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1821.656149] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1821.658660] RSP: 0018:ffff88801edb7af8 EFLAGS: 00050297 [ 1821.659398] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1821.660387] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1821.661442] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1821.662388] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880087a1000 [ 1821.663311] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff888043d9cac0 [ 1821.664291] ? bt_sock_ioctl+0x146/0x2e0 [ 1821.664837] bt_sock_ioctl+0x151/0x2e0 [ 1821.665351] sock_do_ioctl+0xd2/0x230 [ 1821.665849] ? put_user_ifreq+0xb0/0xb0 [ 1821.666380] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1821.667044] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1821.667661] sock_ioctl+0x41c/0x670 [ 1821.668148] ? br_ioctl_call+0xb0/0xb0 [ 1821.668698] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1821.669419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1821.670084] ? avc_has_perm+0x108/0x1b0 [ 1821.670611] ? br_ioctl_call+0xb0/0xb0 [ 1821.671121] do_vfs_ioctl+0x577/0x1610 [ 1821.671622] ? vfs_fileattr_set+0xb80/0xb80 [ 1821.672180] ? lock_is_held_type+0xd7/0x130 [ 1821.672786] ? inode_has_perm+0x171/0x1d0 [ 1821.673316] ? lock_release+0x3b2/0x750 [ 1821.673835] ? file_has_perm+0x183/0x270 [ 1821.674359] ? inode_has_perm+0x1d0/0x1d0 [ 1821.674910] ? selinux_file_ioctl+0xb1/0x260 [ 1821.675482] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1821.676197] __x64_sys_ioctl+0x108/0x210 [ 1821.676779] do_syscall_64+0x3b/0x90 [ 1821.677274] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1821.678061] RIP: 0033:0x7fab6351eb19 [ 1821.678554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1821.680910] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1821.681943] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1821.682864] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1821.683811] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1821.684764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1821.685715] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1821.686723] 00:31:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x1, [{0x401, 0x5, 0xe1, '\x00', 0x400}]}) 00:31:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) [ 1826.030852] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 1828.279037] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1828.283861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1828.291661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1828.304597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1828.306420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1828.309377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1830.382834] Bluetooth: hci4: command 0x0409 tx timeout [ 1832.430870] Bluetooth: hci4: command 0x041b tx timeout [ 1834.478802] Bluetooth: hci4: command 0x040f tx timeout [ 1836.526892] Bluetooth: hci4: command 0x0419 tx timeout [ 1837.135416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.136824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.144423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1837.165326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.166925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.169290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1837.365909] FAULT_INJECTION: forcing a failure. [ 1837.365909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1837.367777] CPU: 1 PID: 15717 Comm: syz-executor.6 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1837.369008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1837.370615] Call Trace: [ 1837.371022] [ 1837.371321] dump_stack_lvl+0x8b/0xb3 [ 1837.371836] should_fail.cold+0x5/0xa [ 1837.372395] _copy_from_user+0x2a/0x170 [ 1837.372991] move_addr_to_kernel.part.0+0x31/0x110 [ 1837.373673] __sys_connect+0xda/0x190 [ 1837.374207] ? __sys_connect_file+0x190/0x190 [ 1837.374829] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1837.375575] ? vfs_write+0x422/0xac0 [ 1837.376121] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1837.377113] ? fput+0x2a/0x50 [ 1837.377560] __x64_sys_connect+0x6f/0xb0 [ 1837.378115] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1837.378817] do_syscall_64+0x3b/0x90 [ 1837.379316] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1837.380018] RIP: 0033:0x7f57a4638b19 [ 1837.380690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1837.383163] RSP: 002b:00007f57a1bae188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1837.384230] RAX: ffffffffffffffda RBX: 00007f57a474bf60 RCX: 00007f57a4638b19 [ 1837.385395] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 1837.386337] RBP: 00007f57a1bae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.387284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1837.388230] R13: 00007ffd13910eff R14: 00007f57a1bae300 R15: 0000000000022000 [ 1837.389388] [ 1842.606849] Bluetooth: hci6: command 0x0406 tx timeout 00:32:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:32:28 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x7ffffffff000) 00:32:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4}) 00:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00h\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c004003", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 6) 00:32:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00e900", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) [ 1851.954284] FAULT_INJECTION: forcing a failure. [ 1851.954284] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.955557] CPU: 1 PID: 15736 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1851.956512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1851.957730] Call Trace: [ 1851.958003] [ 1851.958236] dump_stack_lvl+0x8b/0xb3 [ 1851.958650] should_fail.cold+0x5/0xa [ 1851.959059] ? create_object.isra.0+0x3a/0xa20 [ 1851.959548] should_failslab+0x5/0x10 [ 1851.959968] kmem_cache_alloc+0x5b/0x480 [ 1851.960420] create_object.isra.0+0x3a/0xa20 [ 1851.960906] ? kasan_unpoison+0x23/0x50 [ 1851.961334] kmem_cache_alloc+0x239/0x480 [ 1851.961790] ptlock_alloc+0x1d/0x70 [ 1851.962188] pte_alloc_one+0x68/0x1f0 [ 1851.962607] __pte_alloc+0x69/0x200 [ 1851.963007] ? pmd_install+0x250/0x250 [ 1851.963435] ? do_raw_spin_unlock+0x4f/0x210 [ 1851.963907] ? _raw_spin_unlock+0x24/0x40 [ 1851.964352] ? __pmd_alloc+0x30d/0x680 [ 1851.964782] __handle_mm_fault+0x2550/0x35e0 [ 1851.965257] ? lock_is_held_type+0xd7/0x130 [ 1851.965728] ? __pmd_alloc+0x680/0x680 [ 1851.966182] handle_mm_fault+0x2e6/0xa20 [ 1851.966618] do_user_addr_fault+0x54a/0x12a0 [ 1851.967110] exc_page_fault+0xa2/0x1a0 [ 1851.967539] asm_exc_page_fault+0x1e/0x30 [ 1851.968002] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1851.968555] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1851.970532] RSP: 0018:ffff888042e97af8 EFLAGS: 00050297 [ 1851.971111] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1851.971880] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1851.972647] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1851.973424] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800ee50000 [ 1851.974188] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff888017939140 [ 1851.974966] ? bt_sock_ioctl+0x146/0x2e0 [ 1851.975425] bt_sock_ioctl+0x151/0x2e0 [ 1851.975852] sock_do_ioctl+0xd2/0x230 [ 1851.976282] ? put_user_ifreq+0xb0/0xb0 [ 1851.976716] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1851.977270] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1851.977786] sock_ioctl+0x41c/0x670 [ 1851.978182] ? br_ioctl_call+0xb0/0xb0 [ 1851.978605] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1851.979202] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1851.979788] ? avc_has_perm+0x108/0x1b0 [ 1851.980223] ? br_ioctl_call+0xb0/0xb0 [ 1851.980644] do_vfs_ioctl+0x577/0x1610 [ 1851.981090] ? vfs_fileattr_set+0xb80/0xb80 [ 1851.981565] ? lock_is_held_type+0xd7/0x130 [ 1851.982036] ? inode_has_perm+0x171/0x1d0 [ 1851.982477] ? lock_release+0x3b2/0x750 [ 1851.982897] ? file_has_perm+0x183/0x270 [ 1851.983335] ? inode_has_perm+0x1d0/0x1d0 [ 1851.983576] FAULT_INJECTION: forcing a failure. [ 1851.983576] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.983786] ? selinux_file_ioctl+0xb1/0x260 [ 1851.983810] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1851.983837] __x64_sys_ioctl+0x108/0x210 [ 1851.983861] do_syscall_64+0x3b/0x90 [ 1851.988326] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1851.988911] RIP: 0033:0x7fab6351eb19 [ 1851.989317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1851.991331] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1851.992157] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1851.992953] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1851.993734] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1851.994525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1851.995313] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1851.996114] [ 1851.996371] CPU: 0 PID: 15741 Comm: syz-executor.6 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1851.998154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1852.000536] Call Trace: [ 1852.001106] [ 1852.001594] dump_stack_lvl+0x8b/0xb3 [ 1852.002422] should_fail.cold+0x5/0xa [ 1852.003232] ? lock_acquire+0x1b2/0x530 [ 1852.004084] ? dst_alloc+0x9e/0x610 [ 1852.004889] should_failslab+0x5/0x10 [ 1852.005704] kmem_cache_alloc+0x5b/0x480 [ 1852.006585] ? ipv6_sysctl_rtcache_flush+0x110/0x110 [ 1852.007666] dst_alloc+0x9e/0x610 [ 1852.008426] ip6_dst_alloc+0x2e/0x90 [ 1852.009245] ip6_pol_route+0x8f8/0x1100 [ 1852.010118] ? ip6_pol_route_lookup+0x1b20/0x1b20 [ 1852.011160] ? lock_acquire+0x1b2/0x530 [ 1852.012050] ? ip6_pol_route_input+0x70/0x70 [ 1852.013008] fib6_rule_lookup+0x6c/0x330 [ 1852.013892] ip6_route_output_flags+0x72/0x320 [ 1852.014890] ip6_dst_lookup_tail+0x2fc/0xe30 [ 1852.015855] ? tcp_v6_connect+0xd1d/0x1a40 [ 1852.016775] ip6_dst_lookup_flow+0x8c/0x1d0 [ 1852.017713] ? ip6_dst_lookup+0x60/0x60 [ 1852.018592] ? selinux_sk_getsecid+0x6e/0xc0 [ 1852.019563] tcp_v6_connect+0xdaa/0x1a40 [ 1852.020457] ? inet6_sk_rx_dst_set+0x2e0/0x2e0 [ 1852.021460] ? mark_lock.part.0+0xef/0x2f60 [ 1852.022437] __inet_stream_connect+0x867/0xd90 [ 1852.023426] ? lock_release+0x3b2/0x750 [ 1852.024286] ? inet_init_net+0x5c0/0x5c0 [ 1852.025176] ? mark_held_locks+0x9e/0xe0 [ 1852.026061] ? __local_bh_enable_ip+0xa0/0x120 [ 1852.027064] inet_stream_connect+0x53/0xa0 [ 1852.027972] ? __inet_stream_connect+0xd90/0xd90 [ 1852.029005] __sys_connect_file+0x151/0x190 [ 1852.029952] __sys_connect+0x161/0x190 [ 1852.030800] ? __sys_connect_file+0x190/0x190 [ 1852.031777] ? vfs_write+0x422/0xac0 [ 1852.032579] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1852.033778] ? fput+0x2a/0x50 [ 1852.034478] __x64_sys_connect+0x6f/0xb0 [ 1852.035356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1852.036476] do_syscall_64+0x3b/0x90 [ 1852.037300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1852.038411] RIP: 0033:0x7f57a4638b19 [ 1852.039203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.043087] RSP: 002b:00007f57a1bae188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1852.044695] RAX: ffffffffffffffda RBX: 00007f57a474bf60 RCX: 00007f57a4638b19 [ 1852.046211] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000003 [ 1852.047716] RBP: 00007f57a1bae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.049246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.050752] R13: 00007ffd13910eff R14: 00007f57a1bae300 R15: 0000000000022000 [ 1852.052291] 00:32:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\b', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00l\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00f000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:32:28 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:32:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000340", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:32:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x0, 0x1a0, 0xa}, 0x18) bind$bt_sco(r1, &(0x7f0000000080), 0x8) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000200)=""/22, &(0x7f0000000240)=0x16) accept(r2, &(0x7f0000000100)=@x25, &(0x7f0000000180)=0x80) listen(r0, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:32:43 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 7) 00:32:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4}) 00:32:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000003", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00t\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 1866.616069] FAULT_INJECTION: forcing a failure. [ 1866.616069] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.617635] CPU: 1 PID: 15781 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1866.618722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1866.620207] Call Trace: [ 1866.620555] [ 1866.620857] dump_stack_lvl+0x8b/0xb3 [ 1866.621473] should_fail.cold+0x5/0xa [ 1866.622000] ? __anon_vma_prepare+0x60/0x4f0 [ 1866.622621] should_failslab+0x5/0x10 [ 1866.623120] kmem_cache_alloc+0x5b/0x480 [ 1866.623656] __anon_vma_prepare+0x60/0x4f0 [ 1866.624204] ? __pmd_alloc+0x30d/0x680 [ 1866.624734] __handle_mm_fault+0x2808/0x35e0 [ 1866.625414] ? lock_is_held_type+0xd7/0x130 [ 1866.626010] ? __pmd_alloc+0x680/0x680 [ 1866.626582] handle_mm_fault+0x2e6/0xa20 [ 1866.627154] do_user_addr_fault+0x54a/0x12a0 [ 1866.627764] exc_page_fault+0xa2/0x1a0 [ 1866.628357] asm_exc_page_fault+0x1e/0x30 [ 1866.628940] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1866.629663] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1866.632110] RSP: 0018:ffff8880101efaf8 EFLAGS: 00050297 [ 1866.632831] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1866.633846] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1866.634825] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1866.635777] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801cc37000 [ 1866.636723] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff888017aebf40 [ 1866.637722] ? bt_sock_ioctl+0x146/0x2e0 [ 1866.638324] bt_sock_ioctl+0x151/0x2e0 [ 1866.638866] sock_do_ioctl+0xd2/0x230 [ 1866.639389] ? put_user_ifreq+0xb0/0xb0 [ 1866.639957] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1866.640644] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1866.641331] sock_ioctl+0x41c/0x670 [ 1866.641825] ? br_ioctl_call+0xb0/0xb0 [ 1866.642366] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1866.643110] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1866.643831] ? avc_has_perm+0x108/0x1b0 [ 1866.644431] ? br_ioctl_call+0xb0/0xb0 [ 1866.644990] do_vfs_ioctl+0x577/0x1610 [ 1866.646198] ? vfs_fileattr_set+0xb80/0xb80 [ 1866.647386] ? lock_is_held_type+0xd7/0x130 [ 1866.648519] ? inode_has_perm+0x171/0x1d0 [ 1866.649693] ? lock_release+0x3b2/0x750 [ 1866.650819] ? file_has_perm+0x183/0x270 [ 1866.651859] ? inode_has_perm+0x1d0/0x1d0 [ 1866.652931] ? selinux_file_ioctl+0xb1/0x260 [ 1866.654136] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1866.655593] __x64_sys_ioctl+0x108/0x210 [ 1866.656654] do_syscall_64+0x3b/0x90 [ 1866.657393] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1866.658098] RIP: 0033:0x7fab6351eb19 [ 1866.658596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1866.661236] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1866.663545] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1866.665412] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1866.667214] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1866.669104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.670848] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1866.672754] 00:32:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c004003", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00z\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffe0", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x6, 0x0, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x0) copy_file_range(r3, &(0x7f0000000040)=0x1, r0, &(0x7f0000000080)=0xffffffff, 0xfff, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000001600), 0x8) listen(r4, 0x0) connect$bt_sco(r4, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:32:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:32:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00f000", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\b', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cfffff0", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:32:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000080)={0x6, 'ip6tnl0\x00', {0x4}, 0x8}) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:32:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x1, [{0x401, 0x5, 0xe1, '\x00', 0x400}]}) 00:32:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0x3, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:32:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 8) 00:32:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000003", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000340", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4}) [ 1882.884233] FAULT_INJECTION: forcing a failure. [ 1882.884233] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.885738] CPU: 0 PID: 15825 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1882.886766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.888188] Call Trace: [ 1882.888510] [ 1882.888783] dump_stack_lvl+0x8b/0xb3 [ 1882.889266] should_fail.cold+0x5/0xa [ 1882.889749] ? create_object.isra.0+0x3a/0xa20 [ 1882.890603] should_failslab+0x5/0x10 [ 1882.891318] kmem_cache_alloc+0x5b/0x480 [ 1882.892086] create_object.isra.0+0x3a/0xa20 [ 1882.892899] ? kasan_unpoison+0x23/0x50 [ 1882.893735] kmem_cache_alloc+0x239/0x480 [ 1882.894282] __anon_vma_prepare+0x60/0x4f0 [ 1882.894800] ? __pmd_alloc+0x30d/0x680 [ 1882.895288] __handle_mm_fault+0x2808/0x35e0 [ 1882.895849] ? lock_is_held_type+0xd7/0x130 [ 1882.896410] ? __pmd_alloc+0x680/0x680 [ 1882.896869] handle_mm_fault+0x2e6/0xa20 [ 1882.897417] do_user_addr_fault+0x54a/0x12a0 [ 1882.897925] exc_page_fault+0xa2/0x1a0 [ 1882.898450] asm_exc_page_fault+0x1e/0x30 [ 1882.898905] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1882.899557] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1882.901697] RSP: 0018:ffff888042d4faf8 EFLAGS: 00050297 [ 1882.902389] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1882.903314] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1882.904238] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1882.905208] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800ee57000 [ 1882.906138] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff88800b83a840 [ 1882.907086] ? bt_sock_ioctl+0x146/0x2e0 [ 1882.907619] bt_sock_ioctl+0x151/0x2e0 [ 1882.908098] sock_do_ioctl+0xd2/0x230 [ 1882.908554] ? put_user_ifreq+0xb0/0xb0 [ 1882.909066] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1882.909299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1882.909675] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1882.911583] sock_ioctl+0x41c/0x670 [ 1882.912020] ? br_ioctl_call+0xb0/0xb0 [ 1882.912545] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1882.913278] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1882.913950] ? avc_has_perm+0x108/0x1b0 [ 1882.914577] ? br_ioctl_call+0xb0/0xb0 [ 1882.915306] do_vfs_ioctl+0x577/0x1610 [ 1882.915892] ? vfs_fileattr_set+0xb80/0xb80 [ 1882.916786] ? lock_is_held_type+0xd7/0x130 [ 1882.917577] ? inode_has_perm+0x171/0x1d0 [ 1882.918349] ? lock_release+0x3b2/0x750 [ 1882.918840] ? file_has_perm+0x183/0x270 [ 1882.919363] ? inode_has_perm+0x1d0/0x1d0 [ 1882.919866] ? selinux_file_ioctl+0xb1/0x260 [ 1882.920432] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1882.921127] __x64_sys_ioctl+0x108/0x210 [ 1882.921617] do_syscall_64+0x3b/0x90 [ 1882.922111] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.922782] RIP: 0033:0x7fab6351eb19 [ 1882.923259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.925675] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1882.926667] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1882.927584] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1882.928481] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1882.929423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.930354] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1882.931302] 00:32:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 9) [ 1882.989351] FAULT_INJECTION: forcing a failure. [ 1882.989351] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.990911] CPU: 0 PID: 15851 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1882.991919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.993175] Call Trace: [ 1882.993513] [ 1882.993808] dump_stack_lvl+0x8b/0xb3 [ 1882.994316] should_fail.cold+0x5/0xa [ 1882.994822] ? __anon_vma_prepare+0x27f/0x4f0 [ 1882.995424] should_failslab+0x5/0x10 [ 1882.995940] kmem_cache_alloc+0x5b/0x480 [ 1882.996497] __anon_vma_prepare+0x27f/0x4f0 [ 1882.997071] ? __pmd_alloc+0x30d/0x680 [ 1882.997568] __handle_mm_fault+0x2808/0x35e0 [ 1882.998079] ? lock_is_held_type+0xd7/0x130 [ 1882.998576] ? __pmd_alloc+0x680/0x680 [ 1882.999033] handle_mm_fault+0x2e6/0xa20 [ 1882.999478] do_user_addr_fault+0x54a/0x12a0 [ 1882.999975] exc_page_fault+0xa2/0x1a0 [ 1883.000399] asm_exc_page_fault+0x1e/0x30 [ 1883.000855] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1883.001419] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1883.003390] RSP: 0018:ffff888040a2faf8 EFLAGS: 00050297 [ 1883.003953] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1883.004699] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1883.005483] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1883.006258] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888041d4e000 [ 1883.007040] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff88801b2ce1c0 [ 1883.007795] ? bt_sock_ioctl+0x146/0x2e0 [ 1883.008247] bt_sock_ioctl+0x151/0x2e0 [ 1883.008662] sock_do_ioctl+0xd2/0x230 [ 1883.009079] ? put_user_ifreq+0xb0/0xb0 [ 1883.009517] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1883.010059] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1883.010562] sock_ioctl+0x41c/0x670 [ 1883.010965] ? br_ioctl_call+0xb0/0xb0 [ 1883.011392] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1883.011994] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1883.012590] ? avc_has_perm+0x108/0x1b0 [ 1883.013030] ? br_ioctl_call+0xb0/0xb0 [ 1883.013475] do_vfs_ioctl+0x577/0x1610 [ 1883.013896] ? vfs_fileattr_set+0xb80/0xb80 [ 1883.014380] ? lock_is_held_type+0xd7/0x130 [ 1883.014847] ? inode_has_perm+0x171/0x1d0 [ 1883.015331] ? lock_release+0x3b2/0x750 [ 1883.015758] ? file_has_perm+0x183/0x270 [ 1883.016221] ? inode_has_perm+0x1d0/0x1d0 [ 1883.016671] ? selinux_file_ioctl+0xb1/0x260 [ 1883.017183] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1883.017786] __x64_sys_ioctl+0x108/0x210 [ 1883.018253] do_syscall_64+0x3b/0x90 [ 1883.018653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1883.019344] RIP: 0033:0x7fab6351eb19 [ 1883.019750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1883.021764] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1883.022571] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1883.023396] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1883.024224] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1883.025020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1883.025828] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1883.026651] 00:32:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c004003", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffe0", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000001200)=""/212, 0xd4}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000001300)=""/211, 0xd3}, {&(0x7f0000001400)=""/21, 0x15}], 0x8, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001500), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001640)=""/182, 0xb6}, {&(0x7f0000001580)=""/35, 0x23}], 0x2, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/49, 0x31}, {&(0x7f0000002880)=""/21, 0x15}, {&(0x7f00000028c0)=""/74, 0x4a}, {&(0x7f0000002940)=""/133, 0x85}, {&(0x7f0000002a00)=""/48, 0x30}, {&(0x7f0000002a40)=""/107, 0x6b}], 0x7, &(0x7f0000002b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000002c80)=""/4096, 0x1000}], 0x1, &(0x7f0000003cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000003d80)=@abs, 0x6e, &(0x7f0000004340)=[{&(0x7f0000003e00)=""/146, 0x92}, {&(0x7f0000003ec0)=""/4, 0x4}, {&(0x7f0000003f00)=""/116, 0x74}, {&(0x7f0000003f80)=""/202, 0xca}, {&(0x7f0000004080)=""/215, 0xd7}, {&(0x7f0000004180)=""/230, 0xe6}, {&(0x7f0000004280)=""/41, 0x29}, {&(0x7f00000042c0)=""/78, 0x4e}], 0x8, &(0x7f00000043c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x5, 0x40000000, &(0x7f0000004580)={0x77359400}) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000045c0)=""/220) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:32:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0x7, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:32:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:32:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:32:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 10) [ 1883.129571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:32:59 executing program 1: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x20, {0x39, 0x4, 0x7, 0xd08, 0x8000}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @loopback}, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x3f, &(0x7f0000000040)=0x100003f, 0x4) [ 1883.176343] FAULT_INJECTION: forcing a failure. [ 1883.176343] name failslab, interval 1, probability 0, space 0, times 0 [ 1883.178029] CPU: 0 PID: 15873 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1883.179108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1883.180241] Call Trace: [ 1883.180539] [ 1883.180834] dump_stack_lvl+0x8b/0xb3 [ 1883.181351] should_fail.cold+0x5/0xa [ 1883.181873] ? create_object.isra.0+0x3a/0xa20 [ 1883.182385] should_failslab+0x5/0x10 [ 1883.182807] kmem_cache_alloc+0x5b/0x480 [ 1883.183280] create_object.isra.0+0x3a/0xa20 [ 1883.183967] ? kasan_unpoison+0x23/0x50 [ 1883.184498] kmem_cache_alloc+0x239/0x480 [ 1883.184972] __anon_vma_prepare+0x27f/0x4f0 [ 1883.185552] ? __pmd_alloc+0x30d/0x680 [ 1883.186053] __handle_mm_fault+0x2808/0x35e0 [ 1883.186653] ? lock_is_held_type+0xd7/0x130 [ 1883.187227] ? __pmd_alloc+0x680/0x680 [ 1883.187684] handle_mm_fault+0x2e6/0xa20 [ 1883.188156] do_user_addr_fault+0x54a/0x12a0 [ 1883.188809] exc_page_fault+0xa2/0x1a0 [ 1883.189281] asm_exc_page_fault+0x1e/0x30 [ 1883.189834] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1883.190393] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 1883.192803] RSP: 0018:ffff888042d4faf8 EFLAGS: 00050297 [ 1883.193409] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1883.194346] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1883.195159] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1883.196133] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800f94f000 [ 1883.197118] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff888015aed080 [ 1883.198150] ? bt_sock_ioctl+0x146/0x2e0 [ 1883.198735] bt_sock_ioctl+0x151/0x2e0 [ 1883.199284] sock_do_ioctl+0xd2/0x230 [ 1883.199699] ? put_user_ifreq+0xb0/0xb0 [ 1883.200286] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1883.200995] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1883.201673] sock_ioctl+0x41c/0x670 [ 1883.202178] ? br_ioctl_call+0xb0/0xb0 [ 1883.202729] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1883.203501] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1883.204293] ? avc_has_perm+0x108/0x1b0 [ 1883.204870] ? br_ioctl_call+0xb0/0xb0 [ 1883.205452] do_vfs_ioctl+0x577/0x1610 [ 1883.206038] ? vfs_fileattr_set+0xb80/0xb80 [ 1883.206664] ? lock_is_held_type+0xd7/0x130 [ 1883.207291] ? inode_has_perm+0x171/0x1d0 [ 1883.207879] ? lock_release+0x3b2/0x750 [ 1883.208473] ? file_has_perm+0x183/0x270 [ 1883.209085] ? inode_has_perm+0x1d0/0x1d0 [ 1883.209730] ? selinux_file_ioctl+0xb1/0x260 [ 1883.210380] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1883.211197] __x64_sys_ioctl+0x108/0x210 [ 1883.211817] do_syscall_64+0x3b/0x90 [ 1883.212371] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1883.213129] RIP: 0033:0x7fab6351eb19 [ 1883.213673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1883.216242] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1883.217315] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1883.218251] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1883.219159] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1883.219979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1883.220799] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1883.221614] [ 1885.813061] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1885.820991] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1885.822922] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1885.829618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1885.831865] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1885.833820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1887.857485] Bluetooth: hci4: command 0x0409 tx timeout [ 1889.905498] Bluetooth: hci4: command 0x041b tx timeout [ 1891.950780] Bluetooth: hci4: command 0x040f tx timeout [ 1893.998809] Bluetooth: hci4: command 0x0419 tx timeout [ 1895.921098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.922589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.937298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1895.941646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.942930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.945256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:33:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cfffff0", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:33:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x1, [{0x401, 0x5, 0xe1, '\x00', 0x400}]}) 00:33:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"432866b57dbb478c4e1834ee1b42196b", 0x0, 0x0, {0x8, 0x89a}, {0x3, 0xc9}, 0xce8, [0x7, 0x9, 0x3f, 0x5, 0x40, 0x1, 0x5, 0x3, 0x73bd, 0x3, 0x0, 0x4, 0x2, 0x5, 0xfff, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{r1}, r2, 0x2, @unused=[0x1, 0x7, 0x1, 0x100], @name="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"}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) bind$bt_sco(r3, &(0x7f0000001600)={0x1f, @none}, 0x8) listen(r3, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x88) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000200)={0x0, 0x4, 0x3c81, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001640)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bind$bt_sco(r3, &(0x7f0000000180), 0x8) connect$bt_sco(r3, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:33:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\b', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:33:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 11) [ 1911.706995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1911.730522] FAULT_INJECTION: forcing a failure. [ 1911.730522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1911.735689] CPU: 0 PID: 16355 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1911.738365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1911.742038] Call Trace: [ 1911.742898] [ 1911.743658] dump_stack_lvl+0x8b/0xb3 [ 1911.744898] should_fail.cold+0x5/0xa [ 1911.746187] prepare_alloc_pages+0x17b/0x500 [ 1911.747637] ? find_held_lock+0x2c/0x110 [ 1911.749002] __alloc_pages+0x131/0x4e0 [ 1911.750336] ? __anon_vma_prepare+0x252/0x4f0 [ 1911.751855] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1911.753817] ? lock_release+0x3b2/0x750 [ 1911.755070] ? lock_downgrade+0x6d0/0x6d0 [ 1911.756430] ? up_write+0x148/0x460 [ 1911.757603] alloc_pages_vma+0xde/0x500 [ 1911.758960] __handle_mm_fault+0x100a/0x35e0 [ 1911.760411] ? lock_is_held_type+0xd7/0x130 [ 1911.761845] ? __pmd_alloc+0x680/0x680 [ 1911.763087] handle_mm_fault+0x2e6/0xa20 [ 1911.764414] do_user_addr_fault+0x54a/0x12a0 [ 1911.765890] exc_page_fault+0xa2/0x1a0 [ 1911.767179] asm_exc_page_fault+0x1e/0x30 [ 1911.768527] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1911.770096] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f 00:33:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000340", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1911.776030] RSP: 0018:ffff888042d67af8 EFLAGS: 00050297 [ 1911.778014] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 1911.780301] RDX: 0000000000040000 RSI: ffffffff83a43656 RDI: 0000000000000000 [ 1911.782602] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000000 [ 1911.784807] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800cd6d000 [ 1911.787018] R13: 0000000000000000 R14: ffffffff873edd40 R15: ffff88800b83f300 [ 1911.789260] ? bt_sock_ioctl+0x146/0x2e0 [ 1911.790497] bt_sock_ioctl+0x151/0x2e0 [ 1911.791738] sock_do_ioctl+0xd2/0x230 [ 1911.792938] ? put_user_ifreq+0xb0/0xb0 [ 1911.794260] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1911.795957] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1911.797525] sock_ioctl+0x41c/0x670 [ 1911.802145] ? br_ioctl_call+0xb0/0xb0 [ 1911.802735] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1911.803462] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1911.804192] ? avc_has_perm+0x108/0x1b0 [ 1911.804728] ? br_ioctl_call+0xb0/0xb0 [ 1911.805242] do_vfs_ioctl+0x577/0x1610 [ 1911.805806] ? vfs_fileattr_set+0xb80/0xb80 [ 1911.806388] ? lock_is_held_type+0xd7/0x130 [ 1911.807010] ? inode_has_perm+0x171/0x1d0 [ 1911.807578] ? lock_release+0x3b2/0x750 [ 1911.808107] ? file_has_perm+0x183/0x270 [ 1911.808639] ? inode_has_perm+0x1d0/0x1d0 [ 1911.809195] ? selinux_file_ioctl+0xb1/0x260 [ 1911.809859] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1911.810636] __x64_sys_ioctl+0x108/0x210 [ 1911.811183] do_syscall_64+0x3b/0x90 [ 1911.811735] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1911.812444] RIP: 0033:0x7fab6351eb19 [ 1911.812926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1911.815307] RSP: 002b:00007fab60a94188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1911.816302] RAX: ffffffffffffffda RBX: 00007fab63631f60 RCX: 00007fab6351eb19 [ 1911.817270] RDX: 0000000020000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1911.818236] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1911.819181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1911.820085] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1911.821012] 00:33:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:33:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffe0", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1911.918657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1912.009348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:33:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cfffff0", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:28 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000080)=0x66) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'ip6tnl0\x00', {}, 0x20}) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0xfffffff8) r2 = accept(r0, 0x0, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000080000000000018008d76ad0", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) getpeername$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) sendmmsg$sock(r2, &(0x7f00000010c0)=[{{&(0x7f0000000100)=@can={0x1d, r7}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="c7a42c31dc2e6a6daaa9c1", 0xb}, {&(0x7f0000000200)="6779e70f808badc4e02eb1aefa786607e592b340eec6fda244ce630cdc71e77684371fb60367d6c3d2efa1c4a5c51a3d08387fbcc3e7b2e99da41bf03e7fbe38c3e6fdcc096be2fa7001585a644617bba9c98345bfcdadbbbced5e237b5d87519157ff26ff9797a380d4702f9fae94c7e37184b2767d7401e06b43e7d827a064bf530bc69b92601bfc5c334ef6893bdf2fc072c96aa027a8b134314a6f5750829e62de266b62929c66b4227852f53237706808c50494658c6d021508e9367df8d20a951ed25484fa159b8c26ca650d174c197bf5c58e98b0b3b9d050fa0cdce48dee121dc7427072d865834569f7e1a55d5dd68ae6b554bbcc", 0xf9}, {&(0x7f0000000300)="40609fd182e4030afb015f0eadbbeba175e5c649d90deccf3878ee7f89b61bb77e2a74d9b867c1602bef23cc362ac5546864cb11b065f0d8a8e1374162d304318cb3ee0496fa15bacfef73f1968fecf777e5ae2067d460fa583361d30c", 0x5d}], 0x3, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0xd71}}, @txtime={{0x18, 0x1, 0x3d, 0x63c}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x15a9ea0d}}], 0x90}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="dfc3b82cec18afc758136be19790c10f1bbce2", 0x13}], 0x1, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x3460}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}}, {{&(0x7f0000000540)=@caif, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="8c77d32865a9dabda67386d5753f634e501b148c0afadd24860b80b33729077697405ac7420df1bf1a50c71a4e5b0458812a87ee150ec2b11e2348ee1ceed49925b49dce144cf6350711b02dd20540971f3cb34bc06eeaca9f19c446d0b3ab7c967fdb9884aa5af865729f7e39caed4d8fc4faab2389e00403cfa9eaedc1e281b1a0c5b19e8edd526e09420bdb5b7f9ec79546fbb2105e9e42ebab1ddd5f4138ad2173df16994ee3e08606f84202bef4dfbe87c4e6209438c23cd7be26e39f3d70a5b0eaf902c7f6197c145f77c0a5", 0xcf}], 0x1}}, {{&(0x7f0000000780)=@can={0x1d, r8}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)="b6f9f58491c1c815c43cfbd6d8cbc48665e6acfd64d24eae39eee3b367c738bdf8d996c887df804306d86f3b0b9a0cd72e8c3423e787b5e1824a2778bb794c5d05a4c0186c9baf945c556c217c3af60380bb2aba7870cc838c4fc7d97a098c77ece91d80b5e455d0104deb1be7d53e7d55bc399b773c9bd41b498156b9ac1eca04099df49dbe5b6c3fd246fc8cf3e59d2550bef40b5031f29a3d489ba0de39119bfdcb463f1bc3534527", 0xaa}, {&(0x7f00000008c0)="6a0efb646839245efed8257fddde2734187d9614699a444bb9ca994ae3ae93e7bdb823861d1c59758581f91d75730932617c4de2f463b260a4f450a8f3a5d471c19b5ff3a09efab456c14bc5d7fd95a1690b46632eb1bfe5af74a0b5637f95da40b2770ab15228e665ce0ff90a5db7d767acbd5adbc1c8df790e7f416db7572832", 0x81}, {&(0x7f0000000980)="0d17326e59e42d80f321a57e208f32e3b89728970dd8cd522eac3b577f32784a1e5487708007912bed167c3c391c98f0b071404c384b97ebe22f3d80e0023f0f1cd95a80247afea09cc5bf444c7e183bfb30c070ed7cfe236c6596e2c4a6fcef8a151da7d5e862e2d712a1c3cf01d75c40a1860f5aab364a1c68cf89b5ecfbc3ba2013345b0998ec6adc887796b604306b79e951300319bd9f199273f5866760b3835e8a1b6c7615e163892b6c67131cec90bbd8ae4f6f46ad396db455ea5c51e6c30d9d4d66d7d15a946b850f4f79b162a9e1", 0xd3}], 0x3, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b40)="38582029678d03d8c8e57cbd8840f61d189886055dadbcb11367422235366fed8a2c91e61a899e62a6861ac96d0314b32a5506a8d644d5035acd87fb29e9723fa3e6493995cbce27c4ef4701bf827f9daed6129ae78486ce969605b89efb18a5e46139006880d60fd8d1595023aca5701f184726cefe494be4200f2f21aca0b0a281b8576a45b84ff88edbbad2819287fa1af6dbde388512f5e3d9162dd8e4e03bd6f88a2c1ae6d886c45db5130cc16a07f126ec051f623ef5d33e91c08a71fea8201de688ac485cddf07d10098c63dae19c0b0aa1eaad8f49d94ced67855a1c2c032860a0abffbd0315d5", 0xeb}, {&(0x7f0000000c40)="e1ea8608dfdfb4301ec8b4a05c0ee98ed37fe96517a65c599986f66daf2d14611e7744addda222850277e2fb46f80b6a3559cf783c7b5606a162868429de8128d60ee83e825331df609cf848ef2510d032c6720f047a488ca85498350e3a72339bc4688a4b18488fd62bdf9b56f3bf195e40658e4f201a28f13e26bec87431720830d852ba1d2ee874f8b556f1e88207653d98b7251ff3212cf6873ca041a86bcbf4371201c0e99532cfcb35c7f853c33204c7", 0xb3}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000d00)="dedc644e99fe9d7fbacc6c50867083614f0463e559ddc9423b4ae2ce8298499239cdc0f44fdfb8dc69d95628e847842f749c9805bd024ad3978a07c0a67547a7f9ba5daf9ce84018ae126a96dc57b7f8dcdd9d0d8749ad60412e59e42407af17c7a600a9efbac17a830e0017d243ad45267f10dceae9147e2d71b01e389e08beeed081ab2698fd9dfa643197efa39a5cf9115339247e8401506ff429db1e306c50ac74c04f470c31b11707ff9418570483e1dc5e6012cb4b726f9f09c735c5a8564c83f29de8f84bab581843bc4458b2083e160c25c85dc90a1a8fa59d9b8138", 0xe0}], 0x4}}, {{&(0x7f0000000e40)=@phonet, 0xe2, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="32852180fc026aea3175c8bf2f36efc9aeea283da49c4b4d1d2cd3f3dd4599c82e46153216a776b759d97cef17dce8040b9a1e7788854277f64a42222a791a085a302caae937e7474fcd0e", 0x4b}], 0x1, &(0x7f0000000f80)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xd4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}}, {{&(0x7f0000001000)=@caif=@dgm={0x25, 0x39, 0x7f}, 0x80, &(0x7f0000001080)=[{&(0x7f0000002640)="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", 0x1000}], 0x1, 0xffffffffffffffff}}], 0x7, 0x24008094) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:33:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:33:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000200)=""/209, 0xd1}], 0x2, &(0x7f0000000300)=""/189, 0xbd}, 0x5}], 0x1, 0x0, &(0x7f0000000180)={0x0, 0x989680}) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000003c0)={0x6, 'wg2\x00'}) 00:33:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 00:33:44 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (fail_nth: 12) [ 1927.593582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1927.597022] FAULT_INJECTION: forcing a failure. [ 1927.597022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1927.600525] CPU: 1 PID: 16405 Comm: syz-executor.5 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1927.602876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1927.605744] Call Trace: [ 1927.606488] [ 1927.607053] dump_stack_lvl+0x8b/0xb3 [ 1927.608034] should_fail.cold+0x5/0xa [ 1927.609011] _copy_to_user+0x2a/0x140 [ 1927.610114] simple_read_from_buffer+0xcc/0x160 [ 1927.611332] proc_fail_nth_read+0x194/0x220 [ 1927.612388] ? proc_exe_link+0x1d0/0x1d0 [ 1927.613433] ? security_file_permission+0xb1/0xd0 [ 1927.614878] ? proc_exe_link+0x1d0/0x1d0 [ 1927.616150] vfs_read+0x1ea/0x5d0 [ 1927.617009] ksys_read+0x127/0x250 [ 1927.617930] ? __ia32_sys_pwrite64+0x220/0x220 [ 1927.619376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1927.620740] do_syscall_64+0x3b/0x90 [ 1927.621708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1927.623366] RIP: 0033:0x7fab634d169c [ 1927.624537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1927.629298] RSP: 002b:00007fab60a94170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1927.631569] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab634d169c [ 1927.633786] RDX: 000000000000000f RSI: 00007fab60a941e0 RDI: 0000000000000003 [ 1927.635635] RBP: 00007fab60a941d0 R08: 0000000000000000 R09: 0000000000000000 [ 1927.637488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1927.639635] R13: 00007ffe3afd863f R14: 00007fab60a94300 R15: 0000000000022000 [ 1927.641878] 00:33:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:33:44 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:33:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1927.688978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:33:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:33:44 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 1927.810042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:33:44 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1927.842543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1930.049204] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1930.053869] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1930.068127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1930.083559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1930.086282] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1930.087449] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1932.146185] Bluetooth: hci7: command 0x0409 tx timeout [ 1934.198299] Bluetooth: hci7: command 0x041b tx timeout [ 1936.242442] Bluetooth: hci7: command 0x040f tx timeout [ 1938.286833] Bluetooth: hci7: command 0x0419 tx timeout [ 1940.049314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.050518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.052551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1940.090657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.091838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.094104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1940.268657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x2, &(0x7f0000000000)) 00:34:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:12 executing program 1: readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/214, 0xd6) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x400, 0x0) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000700)=0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="d547070000002000002030de00000000000000449d8693e42375a6f1453fe6fcf09eea4d0303e0724bcf03147a3cda5261ad943b97c47f392a9e81fd26ac143cfd2dbd4a0fe31bd853b1bf0ac370aad457db4dceed3cd53d35cd32451a"]) r5 = memfd_secret(0x0) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f0000000200)=""/127, &(0x7f0000000180)=0x7f) bind$bt_sco(r5, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r0, 0x0) r8 = accept$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c) sendmmsg$inet6(r8, &(0x7f00000063c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fff}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0)="5eff79a53b21b8dc2405b7508bebdf41cce9dcbc171c8a281930205d102f8b42cc51b6ad7cf12035e2411f3dc8e4b745df8580af6a4767da82dbb514627aa55af4a2dd84efd16dfe1790f8f9a4725c50b0086f0200467c8424607a93087fa513bcbeaceb319c005681299298f1db552c7a0af60f828bd561203aa7d5a16387368fdc27fc063cad4fc76ff9d6de0c8eba5ae9a013f475021836bf615a7d4e1e75260691167639be6d2ad955022f8a36821178b917", 0xb4}, {&(0x7f0000000480)="f7b8abe8eaf2af89f6f98d06fce93571d04d18d28fbecfa97130c373a55b34f4e59399429b083512240bcf6c69c69b89b6ff4c2e2a222537e25c729d0592db7f4551c41bf9de4c005ca0735730ee92d09acafcd1eb1b58f96cb21838c65168c17c88f9", 0x63}, {&(0x7f0000000500)="befeed1806cf05eeb2352b2fee3022a5cc0e6d8b21a86a9019262797f4ea45e7f50da2bccc917b7baa26eeb42f8cbb5c627c02ae268dfd2f780234c52cce27a222ad8994eaa424db8624b743ec9e63128185d1abbe4387a6c8bd0a55ef86e1ffd0ef1ce372998ae66ad166d4d0bf10197889c6ee966537a29ad6e4baa1dff5b714aa1cab59cd77723be4197488c4b3de67922afabe4697a4bb32259398eb7f92fe8d553656ff869ea3ce05c78ef2f0c35f2cc6cf1bff9bde2e5561766a356af663fbed0fb75757c9d1dae62bd27f3e8ba6205f280fafdeb4959f9d303c26818bd0b9737921f2d72f305c7d6bfdd858f70b094b6b848e3083a052da5e3b", 0xfd}, {&(0x7f0000000600)="f7a5c75aeeee75fb1e9b079717724a3218e6fceb9231e00f713c57b5ad089c27e4dde49e5319b8684fda579f2001b19f00c76e092b96b1b32178a40d97c9b83ba316", 0x42}], 0x4, &(0x7f0000006580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @rthdr={{0xb8, 0x29, 0x39, {0x62, 0x14, 0x1, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x22}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback, @private1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @hoplimit={{0x14, 0x29, 0x34, 0x78e7}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @pad1, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x7da}, @enc_lim={0x4, 0x1, 0x88}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x188}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000840)="fc8da91c4766ba2525177303c976863f550bc252caeb3339f1fd9228152853e7cb07800202d872807765f4709ff230ca6576eb69d68bcd944aa9f0042ea0dab37a80453df2cb58fcf77b98273ca4e4d82ac17ac739573c58ac94e8952c1cbb1adffda05d67e1605b854483bc42a0df82e5113410c8f439ee1c31e064dd21fca0791811707d804176966e7692dd2b1986ef7aa20b4f73cbccfcd89fee949536ba1444d259d19b33df9daef83cf883ce46418307c182a4f6c949cd0b455e1a44da3da7169cf945c9403854e2a604f517522e4db855260d2c2d5040f2af68a3d50730ad4a040e7af8b74debe3dad9bfff807d0bdc128452082fbaa0ae7038beb065f72821a1c9afa4273c87b1e55d996a3f0b6420d41606ad51c9e14a9896626105d15499178821eabad794cc98efa31a44ab2a3447d21dd80d5ea5ba55e60a289bc1c972d9788de2245d1b83d72f001f183e21a1a565017b37b18c1a355778ca6564fa7aed415b491388ddf1650029f41311eb07ecc8ec6f90df25965e1a7d4886c5dcb7fc6ab7e2aeea3bcce7fcf59347d392fe0e5b0fb1228607aace478b34b5c9d45887aaa38d84344cb3f68eb596e75a150b4063fd32e592be269d4a904c8782e59ae3c3aa6fbfe931213380db979eeec00b8f0f6bed85819f031f8f683fc6e6cc110a778879eba6183d92fbded024cce8c319a6739bfc899b2f371c64a4200b3ddf5a7b506c5d38ca399ce5eb5a35ce0b8d7bc6e40c73e52a48b95e4db636718fdf6fbdbdb124856ef4fee7bd923f60b97fa176b5876ccb4b99bbd85f07ae97f7c0f0e9c935dee4ea23d826564a3d1245e6c8b028572ef12904947dbb2e1ca5e83ee90b2026a04e2490e4acdeb82070264c45d975943a101b05068d5411bf1b91ed0ac53b6ce7f5d39536514a48adfdb0458d87384c2c58db3ffa87d6a80ec718cff0d9b40ba99e1f2ee6722b645e77439c91dee6fc39181ce1e01349cf75e5fa727322c359b729167b683e2a133298b6f563d7fc988cf0c996fe547c7b11b60030881051e283f3f831e14aa8ef2e4188d8617e425475c44506d2273199e5699f4295b5d95239aa82d828bbebabe6a413ff61fe711ab62a441097b62ac698dce4a787c1902545c7c7d04daf769fe5842ae4067ceaeb0265771d5da1bcc4c3ecabbd8e1b6e6cd457af26737ad8df85b9730a4442f2f8f07f925a5c97d7bc426633e7af78555094b6a20e622ee7fa3a80c6bd54efb871f08299bd26470ee489750a3dd566c42f6ccfddb3f4aaa898bdea4fd8bf289d48ca8db0297c407ae609766f89be1a695ca948dcb26efba7efe62f69bd35f254ebbd35b954865f3d90c859f231dded28fa84160a82e20a075de161ece73a5f915438ddc07495e686b0d80e4fb3601abaab83c8bcb192f4e8c34ea3b40e8b98c173688a9dc6796d7f5eb803990f82040bc689c2783c9488be19f3fa74dfa593e7bee5f8d01f22b807732dcb3ef6c20b6e3103e84c7790724ec8b558e874b7f3ae15a7e4cbe75fb5ee3c86b195355c8ef5d5921aa30a193b71e191acb0c56401b76bf66f87e643d71ff8eac399cd8594ae5030bbb82e4048f10c8a4df4afae9484c835befe5c6dafe41e6cca5f357b12a1ddf75e7698a5e3da4d4543f4abb48aee30fbb868988c54b2562fb5aa3fc2895d7c2cb5b18850d28bb7f84f5d373ae771974ed34c70302929c395cf6e52c95519f53ae1c69d0165175e01efa6380a5382630b9f1b100f371cc779724ff7ac76cb79490c72f7c6e02e34ad8954dc3b9866e6035e07b639699cf68b6673a5e840a46a1188b98439a4d1ddd5fc9f2bee690045dfa5a3584fde5834feee6ce80168ed9fe8fc73395d4ccb3a0be3c1a1cdbfa4fa21cc7e4bcb0ced5f7eb588718408d53108a016ad3208a41c7e0f8af7b39fe36b9ad72075324bd4564a30ee467a3d54f0157847afa12e82059dfec2faccf7ae657a74cb4fe56b0f8ae96ff57b703ebaca90fd8f4b0be34fc9a296ae66b165fea3436f7cd33962a89d3af00182c623f7c287abdedb1364333710a3bfef82b5814efbbf100d1f278ece1e2b360daf8f37064ef1e2af9e182463445b8cc24282c70977d39fece40f49a1d30c2c7b9fce83ee32e85310bbb7cfd9b2c84b0e1f4abe9606fa35ef3840c638ab1d1212f6a5f5102fdf1176b2e0588226f424a8983d2b61a0cadc3fe476359a37c82e7d181663855be9288562573b3995ebd5a74893bc267ca871081fe4fda4485a9721bc876a27c2dd7e113fb4d03c0333c41409467c3ebca6678f1ab1665d20171f0cfbbf656c2d1214b5fef064c851bf1093d962fc39e9e6976a67a9a2afd0dbf484063a28b24dc6ec5bc23333c4e2d1e3ad6f1e5362af5be5ef01f920d67b38cc0bf4a73a90bde679960fab433a49eab665847d8eed320e9121b3325d1efaa97145843105b209b4ee51561133191b12dae4a234586dc54c4e505f8337902da39007d5e360bf68ee6b45d0bf5c8ee4c8b7e0068dfe7fa69a80e0646d0dff8f5d080e987dc6eb4cb88385c1c3f8bf8808544df9683d44e47b5042a0dba4ed529446edfeb13265436668dea4fcd53789de0039d09a7a6e2477fa37bc7e1fb4ace4e2821d140c0632ef9f37e84e18aa2d9d37d2ba236e6e86ca94b77adbaa5ca376d9ac54aeb18dc6752ba034ec8f3c5abf420d76fc054512d16a6494562463b6bda712fcc601e4365c1ff5b733e3ad93927dc243aa35497ecb12b768b093b17a6b4368b544505c02c50817f7a6169ee5052f7faad712d468de5babe1e4028e6a373030a2d86ea3657abd33503537fb1cbca33d3c33968027d503d3bc659b1d88118e4b235cfee86a54985a33af4cda27dc09416cd386a32ee5c2a5a7795c967fe54b7d04fd50862a8576934598a51da34e4c8bc419cbc2aa5cc5a3ad509116ebbe1504dc306e8b35c62bef5ac43fe849de578870c6bbaa39e3534dedee9da843b65aa0085389ac567888b5ef8c58d27df7f302ccdcab130168ded778af87c3c840af2e77af339d4e98414698d35ed050c71f71ea800f5258a3b40f176986c704883c5b24d981612e3a56cdbcd08fba4f8b65f0a5b8ec7d8da7653fd9b4d82c082ab33a4aaed2f727fcdd516b39ec97e53f804daf31830c02695523c95d0436b504122b3f104440e77c945a9c45ac534d7bcb0a939f125789fde425ddf2e508d71141a97865e5e3471330c607ef2a7eee6cbefd6976bead444f449a545485c812f3e7fee9a7644389a77cd150ebb3a680354acffb92ea8294bba629c5a2b79fc71594d1bccaccd47699ad1cb4e169ad29c5a3b739349e33d784168b7292556d8cd9e62c6cd0852498a528240c497d8271fa97602d06d23047d658ed22fd8ce82f86068b7f93c7f7cc85eea09b706e0fcb1d8da997b4f417199fdae1223cc1b06597b51d231ce652b9c081590beca00fa505c20df69e47a6d82972134cdb853b9e320e8204b2bf1f6d2dde4e8ef25f05c940fd6d5db81d59c2bbb4582c1695900dbeecd5fb61bf49812d09890f589a5ef6f81288284455561152e128b0c0a96210f58dc7d1948448b4a9f39b59c19f789a54d48554adaf64af59cb99769ba1a4e932d47442b9d2c0734c673b406bf26acd427392d6fb7ccc22e5535db5527a1edeb166eda7693550fc52eff75efd9dd35c6a53d004524af3a97a6c698150fef2bfb811c714381d088870de4a3abf6c7d4a961b5200f273b30a5a4bd09e69dffc67bc789b5d7d8dfcb5bd6a9d85c71a2f377c12cba54a56725491289bf02d8759cee1216ada063f29de458e35a662250a8fbc2025e3dec61f360d0d6e47a995e4c5ffa5ca617f4b9e1e61de61a0a5ad02339234da5eafc6c1874b0556fe15b52745796e751d90566bf103024c2b8ae7e6572d30d6550ab317ed363d21f3951f9ee733533661aaa58491681f9df83f7bf8ee75e53380bd1212ef19e9cd5031eea8a34e8e1e3327a5d6618daa36d3623286e4697f84a5c5c5d52ac870309944a2a86ee06db3a21a3c6349b63fefa361a5c79aa9bcf98dbac1bf4de178cce9430675e59e14cb36ea369106da407459abceed5e7db57a3dd3e66158cc0a339ebf877e70329504fa6436fd5b862c9bbc510f6032b28c742d480022b85ce630403c67e245cb4dce95721fcc0b01aedd7c5adbb01f72995b9f783a17aef5d001c7fccfb2e375e98cf669035fc55e321ab8c42b06de5c5fd3d133b09275764e015e2c8ddd893a1db36e26a6924675eba1c76c248144d323062911a8700acbe52489ec3b4c7e0d4a53f33b5d6dd76e8f490d94a4c5a4aa404ad5a9507ead037c6b787d7b192afcf8e9e53fdd7f3fce6877bfaf37b8e8a0bcecd75180679215e5d64d69f33f45d03e7ae5640e470333527f8933a398a0816896f8f7714db52adfefb04cc4b6bc27708d8e11027569417cd28e89bca1c9ba236978e54ee6ebd174b60ffa50b81f32f2f834109359aec0084a9e912a55c1e4c46b00763158e2afe3e1ee3670ee12999f34de6298fd75a853452ede10c44c989b5221df65c947786b2f2d7a4c9a693039ad93bc81c3888d3f0ac133791a48fec7e97f691c0db9102ed08397c192c357f7bd515e30654fdf13d3c9795cc4599b05c3fec498fa246e11dccf4ec6f262663dfd0c693b87b599008c87aff7ca089f332e32b95b937ae5ddd6f2a3786ac44974a1ca20486fdf8c641c112680aeac5ed75799ac0164cb4525668c74d67d315716da7d2ebc716b9462106134504b6c76a79485987cfc7d40544514a8d28bcbf4b7ca409d7c02b6d5c8d72f2c44b22ca25af14ba124f28f520ecd047c3160f058d857901dbcaf7395084819418134229eb797bdfae5be221ef1a28f403999362f9766863cda7b0f229f874394fd0a97ce932dee9f22e6deee743c893453f6636163d23c58716ba488ecc5dbfc67ab181fab7781791dda8f92c0dec949b2ea4cdd03c14eb5667893e5aceb2193f8f34550cb24065180e9c2360f5410315ba18fa76a9a351e91a4fcd24b8d37aaffe665fcc1dc754681e97c859ac7885661da3ff22b2998351820f2acff959b1daa56c6241d45d57ab2bde52e8ec2499e030ae9ca12467d403e47dab7e6edd3b1f61b50545d3feb259ec63d50b9ebfd9c80ce58b7c99acfe306536a0c8962dab96d76350c3e8c74901c290532414155aa466fae248c4031282164c1f7c9ce7c3b341a00ac45b0a811854ec4586c55b10c81c70561199cfccc41e8f2759d7ad633d9da1a9ec58f5ef8898fa6ee114fd3074aba31085c223ff0158b275bc002c646d61db086cadbb78a3e5c3d183efbc02bb486de0a17e08715d3cb9a98dd5e6ff39e73ce10490338800e492777c79b2192810a8de584a9879f4ef691157c3d3220f6a8392bf98b7a9be7d91c68027908844568179eaa5498f7090976bc905bfb0171aad907dcab92b442d231217d832d5cb06daebee26ea306e0029df901573ca5635da6ee8d110a163b63b6eb93b53b99a458818d5269a927ad535f3edc409bf567896e8be6fb532b77813948e37c05522432c0a9ad09adbcfffcb66a4f5267d659f2ce867c25ec328deca9e75e564353b865711786c2de6582f0e22769ce8a0157ee3dacf59e3578c8be2946bbb222a8bea4ced169052ddafb40646ec6417c18b9775d8cf9a8c363e3a4de3628c57ff7a6c67589de5af9733ab1f14560583d4260d62595a2d5da6dd3f5e98b3b6d9ea88cd4a36677d03f12fb1d6bc6fe0a2f1f9c19d920127249aa852de40652067285175909", 0x1000}, {&(0x7f0000001840)="e3eb078b61092ddd75702f5e87c3152bcdb5d1999c369b5aa4aeecbd88dcc92b60f92dd6b8dd0c9e162550f6bd79e3e8bf24efa239ad", 0x36}, {&(0x7f0000001880)}, {&(0x7f00000018c0)="041089c32f9cbb37350279cb603b800954426ac8b02b1129d9fa066597fccfa67b99b47e316c4b692e38dd7e9aafa9eb56ddef8283607ae52a442d98f06be042bce0ccfa662a7a67a390d43107396e08bace5772e77c2cc0419c12676a0bd0b0a50746c5823bcc33cbb2a9956c901ff4b00d5edd964a040172a6af1bebc287689ce9cc2ad0e4c7a49ca704a500b312a773ba39876b7ec1ff0a5e9b1265be0966373e319fa11b56c56a870511a07782a77368f6d5c8c9a2a10c7d16d2117adace22364351635e36ad88a409184c49a2c7e0d378b5c1224744a4a005ed0929f70d699fa39d40a1816b327a950a4e4321baced1", 0xf2}, {&(0x7f00000019c0)="6f43544e7f782e319730dddb42236a870e1a81b7b6ea7f337f3f801efe9c035e1676d8a0377c814fa6a397a7fe9702bfb93488e66955016708a7a9ad58454733743f7d8babbb0ada4b1d57a9394c9389636217df2c9c693d54c8863149f2d711a18d3053374610cbab91f0960d38009995d08cfe1ddcae5cd2953e3b8c039af0f9bc057bae2fafe790c2df9e5e160c9a9546ba6bc1f817f145b455ef180fb85d5dd0718bfafd47f8b91983", 0xab}, {&(0x7f0000001a80)="18ecee6ea426742c2513bcac47132ddd66186ada800c253928b95f1c5178dc6e23afc3090710d2bf92eacbf1375b1cde06b4470314e3b06a8810f30f1851be2e7129fbd4398a05f8422f69001ca30b747d0b13966bf76de733b3db18c52145a11f14a78daf1b4d8aa84dceb109feedb56d140d3bff870abc5d054ad848", 0x7d}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="a48d58f250dabe6b057d5c2d5d9d0c29e0f23f61a8e65946f251fe07dbf697bc976f2a7d0d865275233b97b3f3870cde61f7ec973524df59ab6558b0ee2d35370bb6905917a8188bfec6a31688978866346892202c3701a5528136aa695f4c1e0a01c81ad5e4abc9dd5395b216fbd1d37a47510adbeec399cca6e91338b5e7a7f651e77ad4d8d9205eb23947b1d70c3a20cd0f83879382a3bff36d6e681e38c3fc0567e0fc2dc115a9004ecbf3cc23da9a854b7cf6d0838aaf9b5d576729026eda72", 0xc2}, {&(0x7f0000002c00)="348bf586a4c4aea1bc589312d37bc31f63ea6deeef10", 0x16}], 0x9}}, {{&(0x7f0000002d00)={0xa, 0x4e20, 0xffff, @mcast2, 0x6}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000002d40)="bda3ec125a1f150da17166d329921d74750a1cb62738263baf6fc4e3df22", 0x1e}, {&(0x7f0000002d80)="d77d4090e27770c79f472f444dffd5b09a5227f320831b2fa28160def1a9dfef02a538d7bbf79b8d17fd6c65fa2f22d87fc6d589c393d944", 0x38}, {&(0x7f0000002dc0)="7c4a9360bbcfde76aef0677a5fe85b7533f659cef240ba33716c5744f7", 0x1d}], 0x3, &(0x7f0000002e40)=[@flowinfo={{0x14, 0x29, 0xb, 0x38fc}}], 0x18}}, {{&(0x7f0000002e80)={0xa, 0x4e23, 0x7, @local, 0x5}, 0x1c, &(0x7f0000003400)=[{&(0x7f0000002ec0)="1fb6c7f22941f48dcf8d13059e96ee89bef8f25037757b4e9dbbcd448c3ac9aac301d75fb40aa8260f03de2d1d4b0bc5b1343662c8f4e192331cce8c8f147b8f27e259c90a1e044617abad7d6e0cb65bdf77a28db5849564d56ceedeabde6c91fcaa836e61299ee2cd8a5556b02d4a13d221afea5a0d7c0c54edc580740786a4260ed7c73627ed5eb38fc7ed0d8609122f8d9023a822ff7ec63ee01f769b200e6f7a1e62baffff8dcd4c6ade474fd068eb2c90b3ca46dc27ac9cdadc944405179a5d9eb6f993caa4a2158637669d5a64f73bb698de18fd3b14bb19476d9e4a035c8c3d4b20f14895290828eeb321ed813b1d20", 0xf3}, {&(0x7f0000002fc0)="ed991a54aee36ee7898d0e6fe6aeefee736333dba5084f66a4599b3742c5b8cd577c2558f3486d31b71ac0bf9e44d16d20e5adead9d74554549e8f6fcbb5b349bdbf22e1d758746e56e6b475cd0209b10819471ac4c5de778f4f670103b87b4466b61e23e5cd4a7e903eef621b618123f3fd820e2feae313be69bfbdbf2c6fb0f491aff065efdbfbaa41e356ab5e85b864e435", 0x93}, {&(0x7f0000003080)="f2a5709dd9b2045d6cfad58e1b0b23dac18949297619fa7e13b86631076a3cf2737f90b9daeea900672841a7e3ce0d0418c5e0b8184a4b4e56b7583647c1a97c4dfa182ea9b7d114c0154af1dcc85035a62b8039878533ee6f5b588e1e8c2ce1e7b4ce8e515c62eee673193bb6ad2457913582cb72e5fd1002f9ccc55411f03cfb6c53ee873e91bf2eb5c4fd27c7b4ea70638321a42f97fd959743066c8dd2", 0x9f}, {&(0x7f0000003140)="a7ea111a8e91858ca19151042ed147ba09204a6b88c8ee58dc058ea559d24acd59e673b8ff64c57eb6ae8745b299101f6bae052ff42df96fd235433229846439074e37e1b352d7fd7191b95052bb25adbd826b961d743718d604958e1d823be6c15c7619b97353664a980104e3ecb46d34987f327b0e7b7041ed39c98992e677e529a118a7b003a91c3c9df548e8d1e0118c635e5c0b2a060a0e313824bd3262d9b3d9c834a55bd3c3ad240c411e84d49f3f3d817f073bad74fd81a4b65ebbb03eafc618a9dc116f", 0xc8}, {&(0x7f0000003240)="feaba37d08c33e0970be1cede600e688208b6ca7619d6ef80398c856df2078612fed84800183ee4c26f48b53f85a6612adfe1b87cac87b5c5ac8761593d258c186d540f17acc03774f66ae82cd22ca9a79f3e2f3343b453e6a6bdc5bdcf2f75a3c89c8bad35b68555a67ef5238e2ea892d4d0100b47907e548f5adfa51ecf78e367a97b61b54c80dd52684bff7e21f7b932798107a4c4cf1364bd0bef4d7f9e66ce792f191cc75d2431cc3245b7f92b2c5cac16343bd9c9983eaf752e1275f101f97d41076b6d48cbc7928d4", 0xcc}, {&(0x7f0000003340)="4acde02cfb9049d14a238bccbb1f98bafe972800b9dca3bc0a8527ba5dc0b8f90481ab34c3f47178f142deeb02103c9009a47e77e805dab4c9c197bc9477a0e18909f11f220dc19d2cb37126452f8de4b59524a431881ab6b84351ef7faf1667390bab3b7f992f2da61d3ab4a19dea362f62e2a54707044f00904938d16e21f1e5ed68bdf4c0091e5fd93d4c219c09d878bfd185187500ae2a3b7a6ed528a1", 0x9f}], 0x6, &(0x7f0000004ac0)=ANY=[@ANYBLOB="5000000000000000290000003600000016060000000000000401090730000000030ae0020009000000000000000900000000000000040000000000000001000100000000000200000000000000000000d801000000000000290000003700000067370000000000000001000502000104014b00010001d7655fdae1cff1c3cb8db0e46724176a923aa4fb0d17c5edb53f0e5026458860ef9d8906d9b812b4686797c2e5000000001c1963e67a3919d6c3137b20a858b9fee76d60a2f78df1aa6d505a5c43fe765a933664efcd2f7bcd71719b66b1b43ed6d2f1c300349a25fc89bf9b2c4f3ebf1cd95357060b3bf37eede8adc3435c3b747b2930101ed96dae25257562159b6bdae5c19e5685b7cb68aa6c5ba7ab8eedef9190e5c5b7fe138e1ef62b33218391f8042b79e7b5e4f8b1c303d14df6a00376f7cff985b8fc0e099a726d8eff7d480000000000000000099719df5ba17b252d617db44849e97a332c24ae188c57a38e5fd90124555a161b9254a32707fa05bab3cd9b94c1fa1a24c6923425675f8f5ad6d70bc03aaa35531ca5a10cd15a1661e0d2c2dcc4ce48086503f317359980250504ebb33755b6bc8b0a9a5a200bf5b3f00b5df3861dd5a03a0b7ec8a9d1a35f9426759464a33c83a30e96f16746dba6a1bb38469945920d50fe0bb7feec53490728000000020806ffff010100000000000004000000000000000800000f6f80be3da1000000000004000000000000002010585da9a33039818cff6700d2478d17f60001000000c000000000000000290000003700000000140000000000000401ff04018ec204000000011f93b5e5a32c434f130a7935acaa9955a1a78d7d00c2c136c5ca3e087c064718963b2f4bc057f1956b85830ba4e3809da4cda33c8a147c922b83b8629b9f1cab3b08c79d5ab4599b1206502d77d14ce4cce365780d54514b7ee98caca2072ab731b71cc7c36e2988d530d13d89ae588688b41cbcbe7eeaee61f1b0232949da600e566df41edd05d5c8f8dea71270dea28aa095235f000000000000001400000000000000290000003e000000c22d000000000000"], 0x300}}, {{&(0x7f0000003780)={0xa, 0x4e23, 0x400, @local, 0x4db8}, 0x1c, &(0x7f0000004a40)=[{&(0x7f00000037c0)="5970a8c0876dc49e09711fc8edc5353b48297f51e4b274403800e86e6a8415003746bd4d76d2ac06f2fe9acdb2878564e9e7a4b1e78dad52b4869a708b988122117b74af683cf5ea8a23b077c6dc9fd25637", 0x52}, {&(0x7f0000003840)="6c2394c951b8b229a5e410926c37ac265e59e5aa2e1cde71582cf80d972cde4d3942d9df4d1cc98c081504a90ef9845ab19bee4e184de02124bbd9926e1631f304d6a7f52622b9658f98e5272cec6ef9e297f00c48ad689580a68bfda8a6dc5e18997c0cb81202085cf6eba13a", 0x6d}, {&(0x7f00000038c0)="13f5bde2d445057c8304c65051d466c90a3a8fb29e00", 0x16}, {&(0x7f0000003900)="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", 0x1000}, {&(0x7f0000004900)="3a566ddc03614d429f022f2ae4620e3c44f355a7e29cb01f85079cb76be2d3d09b34d1ca03b4174afca6f61c95249e2c959aa04a7c22cbfb29bf30c29d56499c92b275a9ab3bac6327f301e8ba66428f93", 0x51}, {&(0x7f0000004980)="ea412c380667f75cc45d8b71fc45f4c9d7fcc69295db9d2640ba5bb1b89def0c5fd984a27ea57486040d3f3c98aea5a7db2ce5b338dd845a976c1e45472c58929228de04f603729f2850dfd48a2e72fe8f5446bb5ee234855fae6f24aed171e5e06ee65a07e1be3a755e90e2c72e34ed23721f51681023197fa29927b29cdb8b55db67e5f703c020", 0x88}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="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"], 0x11f8}}, {{&(0x7f0000005cc0)={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000005d40)=[{&(0x7f0000005d00)="d94b13b40eb0f51571fa89702579ef43d21e69e46a57d554fbc1d154c34c", 0x1e}], 0x1}}, {{&(0x7f0000005d80)={0xa, 0x4e23, 0x6, @remote}, 0x1c, &(0x7f0000006180)=[{&(0x7f0000005dc0)="07a743b9d5dbd581b4cb9bee6c5d22b2620eac251bfd3513d2208e2a9d368415a877d2217714b1910bd1b094bb902bfdce21fd4d98b6f9791cae759e36dcb396e91529d0a0060a7248e41b02d9abab280c30682c8a5b4f83926fbd5cb949da14803dc1dabd38d47ce02b1dbbf6f87c0e886c7e3307be492a8d8e6b0f4ef8826fb0d559c1b3d6c0fab64ba12dd73247610ed7ded97dd27bd50a650592e7e345bb977283e13dcd49c4", 0xa8}, {&(0x7f0000005e80)="f138351609694c7eaf0a27782d373e0a64", 0x11}, {&(0x7f0000005ec0)="9d9c41fca58ef7cac3f243a5a85d88aeb3b1240bbed8ab34600828dfd3fa737ce7242f9eca61cb7c978318845be2276f33d1a2a40fc46b0c946794741451009977933b403c17280d1dee516f0efdf4b61a4f4488c5128dbd850b5b6205c31e7a1ea32fe5c3", 0x65}, {&(0x7f0000005f40)="d55f9a937e4545", 0x7}, {&(0x7f0000005f80)="747caa93bfed9bd99ab2744640a52f2b349a1ca6faeeffd8aac941296a23b1819b10caad0d1f567fc75b22df306f1b5d020bc383d6dde3888cc241a9f66485af5fc31a9124ea31c178f69c38fdd403f8bfc708640f1a4b2f1f70df6f6303b342f12c82c75f330d904b9c010ff4186bed553e9e2e023163e55167591fb28a5cbf5955ed391a0a3956fd2e48806ab0db37abbf632cc1acdf00b7cdf79c6e4c573cffd07bcab226bbc68196a2015b0d651487e21463242d234564a3a7b5c0fb45eceb8e3dd6f6d05fd04f2466dd3f3f791d071ca107da1cf825fcd874b027f54e9c10b25fae017c5bad62d1047ea551de629f3a8d0a29b9b3a3e5a775b9d2cf", 0xfe}, {&(0x7f0000006080)="296e33c6a4f71932b9fd62af9c1d83f9364dff560b", 0x15}, {&(0x7f00000060c0)="274e6c8d7ad8678a99c9c4d196593fde8a24407e132a59c554e6a5838ed4221bb5c77f01e3d22a092826c1b8e9af0317b65f772d0b0dfd82803b2f42b6f602720cb12c64fba224f60d60be5d8936faa4bea7bb23faedc96bc2cd89d1d17cf1ac4d76adbb1c259b5582c8fa7d86c4d3a3ae20a2fac70a9981", 0x78}, {&(0x7f0000006140)="0e97eb6574b92541fc783947b6dec62176eb396e6bc61cef1eddfc2d95c083528aaddc0668ae", 0x26}], 0x8, &(0x7f0000006200)=[@flowinfo={{0x14, 0x29, 0xb, 0xf84b}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xff}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x1, 0x1c, '\x00', [@generic={0x0, 0x80, "0853362f61f2d116c4918f98b6415678c46e9e530a2e8d2d5903036d5d13393e89c1db83b9a1e836b9f39ed2e08b39af5d280f9d8d9c25d1e36ec02809fab90bea72a7498d794e05040e13a8c7b1f1d1ee84abaeed8719f698636ee18a677362089a2f842079e5fa2087010fccc951c88e494a9795fca5bf5d09817a2d14fb1c"}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x48, {0x2, 0x10, 0x5, 0x0, [0x3ff, 0x1, 0x5b7, 0x6, 0x3, 0xff, 0x0, 0x20]}}, @ra={0x5, 0x2, 0x6}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x6, 0x2, 0x0, 0x4, 0x0, [@local]}}}], 0x1a0}}], 0x7, 0x10) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x7, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:34:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:34:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1956.222563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 1956.247795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1956.253144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1956.263156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000200)=""/209, 0xd1}], 0x2, &(0x7f0000000300)=""/189, 0xbd}, 0x5}], 0x1, 0x0, &(0x7f0000000180)={0x0, 0x989680}) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000003c0)={0x6, 'wg2\x00'}) 00:34:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x4b47, &(0x7f0000000000)) 00:34:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:34:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1956.461583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1956.481778] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1956.632535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1957.038671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1958.322567] Bluetooth: hci7: command 0x0405 tx timeout 00:34:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4}) (fail_nth: 1) 00:34:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:34:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x4b49, &(0x7f0000000000)) 00:34:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x50, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:34:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:34:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1980.314504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1980.334869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1980.345855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:37 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 00:34:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:37 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfc, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 1980.434527] FAULT_INJECTION: forcing a failure. [ 1980.434527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1980.438496] CPU: 0 PID: 16983 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1980.441102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1980.444867] Call Trace: [ 1980.445828] [ 1980.446592] dump_stack_lvl+0x8b/0xb3 [ 1980.448008] should_fail.cold+0x5/0xa [ 1980.449389] _copy_from_user+0x2a/0x170 [ 1980.450787] __ext4_ioctl+0xfc1/0x4e40 [ 1980.452214] ? lock_is_held_type+0xd7/0x130 [ 1980.453847] ? ext4_reset_inode_seed+0x440/0x440 [ 1980.455538] ? lock_is_held_type+0xd7/0x130 [ 1980.457089] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1980.458960] ? do_vfs_ioctl+0x132/0x1610 [ 1980.460428] ? vfs_fileattr_set+0xb80/0xb80 [ 1980.461974] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 1980.464030] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 1980.465692] ? selinux_inode_getsecctx+0x90/0x90 [ 1980.466429] ? lock_is_held_type+0xd7/0x130 [ 1980.467092] ? selinux_file_ioctl+0xb1/0x260 [ 1980.467818] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1980.468588] ? ext4_fileattr_set+0x18a0/0x18a0 [ 1980.469255] __x64_sys_ioctl+0x196/0x210 [ 1980.469854] do_syscall_64+0x3b/0x90 [ 1980.470359] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1980.471472] RIP: 0033:0x7ff5e66fab19 [ 1980.472652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.475091] RSP: 002b:00007ff5e3c4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1980.476308] RAX: ffffffffffffffda RBX: 00007ff5e680e020 RCX: 00007ff5e66fab19 [ 1980.478574] RDX: 0000000020000140 RSI: 00000000c020662a RDI: 0000000000000005 [ 1980.480866] RBP: 00007ff5e3c4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.483200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1980.485417] R13: 00007ffeff1d755f R14: 00007ff5e3c4f300 R15: 0000000000022000 [ 1980.487815] 00:34:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:37 executing program 1: waitid(0x2, 0x0, &(0x7f0000000080), 0x80000000, &(0x7f0000000100)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000500), &(0x7f0000000540)=0x8) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x200a00, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f00000003c0), 0x1, &(0x7f0000000440)) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f00000002c0)=""/76, &(0x7f0000000340)=0x4c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0xffff, @mcast2, 0xa0a}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @empty, 0x2}, 0x1c) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000280)={'\x00', {0x2, 0x0, @empty}}) [ 1980.598399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:34:37 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x5421, &(0x7f0000000000)) 00:34:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:37 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000180), 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) r1 = syz_open_pts(0xffffffffffffffff, 0x620000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) [ 1980.721954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1981.078980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:52 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x5450, &(0x7f0000000000)) 00:34:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4}) (fail_nth: 2) 00:34:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:34:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1996.112194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:34:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1f4, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:34:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1996.133557] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1996.149885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x218, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:34:52 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x5451, &(0x7f0000000000)) [ 1996.203772] FAULT_INJECTION: forcing a failure. [ 1996.203772] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.208130] CPU: 1 PID: 17044 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220407 #1 [ 1996.211523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1996.215386] Call Trace: [ 1996.216275] [ 1996.217003] dump_stack_lvl+0x8b/0xb3 [ 1996.218309] should_fail.cold+0x5/0xa [ 1996.219666] ? ext4_ext_precache.part.0+0x93/0x580 [ 1996.222744] should_failslab+0x5/0x10 [ 1996.224822] __kmalloc+0x72/0x440 [ 1996.226621] ext4_ext_precache.part.0+0x93/0x580 [ 1996.228750] ? lock_is_held_type+0xd7/0x130 [ 1996.229498] ext4_get_es_cache+0x2e4/0x670 [ 1996.230219] ? lock_release+0x3b2/0x750 [ 1996.230921] ? __might_fault+0xd1/0x170 [ 1996.231639] ? ext4_fiemap+0x270/0x270 [ 1996.232239] __ext4_ioctl+0x1046/0x4e40 [ 1996.232837] ? lock_is_held_type+0xd7/0x130 [ 1996.233527] ? ext4_reset_inode_seed+0x440/0x440 [ 1996.234527] ? lock_is_held_type+0xd7/0x130 [ 1996.235260] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1996.236027] ? do_vfs_ioctl+0x132/0x1610 [ 1996.236649] ? vfs_fileattr_set+0xb80/0xb80 [ 1996.237301] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 1996.238155] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 1996.239061] ? selinux_inode_getsecctx+0x90/0x90 [ 1996.239775] ? lock_is_held_type+0xd7/0x130 [ 1996.240444] ? selinux_file_ioctl+0xb1/0x260 [ 1996.241186] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1996.242072] ? ext4_fileattr_set+0x18a0/0x18a0 [ 1996.242793] __x64_sys_ioctl+0x196/0x210 [ 1996.243740] do_syscall_64+0x3b/0x90 [ 1996.244310] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1996.245081] RIP: 0033:0x7ff5e66fab19 [ 1996.245625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.248281] RSP: 002b:00007ff5e3c4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1996.249375] RAX: ffffffffffffffda RBX: 00007ff5e680e020 RCX: 00007ff5e66fab19 [ 1996.250393] RDX: 0000000020000140 RSI: 00000000c020662a RDI: 0000000000000005 [ 1996.251434] RBP: 00007ff5e3c4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.252460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1996.253478] R13: 00007ffeff1d755f R14: 00007ff5e3c4f300 R15: 0000000000022000 [ 1996.254515] 00:34:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:52 executing program 1: ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x400) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) listen(r0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000300)=""/96, &(0x7f00000001c0)=0x60) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080), 0x9}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x410201, 0x0) listen(0xffffffffffffffff, 0xffffff3d) accept4(r3, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000280)=0x80, 0x80000) 00:34:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1996.311323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:34:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\r', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 1996.426658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:53 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x5452, &(0x7f0000000000)) [ 1996.474604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:34:53 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:34:53 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x240, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 1996.592869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2010.542755] Bluetooth: hci4: command 0x0406 tx timeout 00:35:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x300, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:35:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x5460, &(0x7f0000000000)) 00:35:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:35:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4}) (fail_nth: 3) 00:35:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x4a}}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000001440)={'ip6gre0\x00', &(0x7f00000013c0)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x3, 0x5, 0x4, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80, 0x700, 0x7f}}) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000fedbdf250400000300000000018000002c000280060002004e21000006000b000a00000002008fd2874c24070002000000060002004e210000080007"], 0x48}}, 0x24000000) accept4(r0, &(0x7f0000000100), &(0x7f0000001200)=0x80, 0x80000) r5 = accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f00000000c0)=0x1c, 0x800) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000200)={{r6}, "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"}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001480)={0xff, 0x6, 0x0, 0x2, 0x0, [@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}]}, 0x38) listen(r0, 0x5) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000001640)) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) [ 2010.674942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2010.681256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2010.694859] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:35:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3e8, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:35:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8901, &(0x7f0000000000)) [ 2010.744095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2010.772392] FAULT_INJECTION: forcing a failure. [ 2010.772392] name failslab, interval 1, probability 0, space 0, times 0 [ 2010.773647] CPU: 0 PID: 17118 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220407 #1 [ 2010.774509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2010.775712] Call Trace: [ 2010.775985] [ 2010.776220] dump_stack_lvl+0x8b/0xb3 [ 2010.776629] should_fail.cold+0x5/0xa [ 2010.777035] ? create_object.isra.0+0x3a/0xa20 [ 2010.777520] should_failslab+0x5/0x10 [ 2010.777924] kmem_cache_alloc+0x5b/0x480 [ 2010.778366] create_object.isra.0+0x3a/0xa20 [ 2010.778831] ? kasan_unpoison+0x23/0x50 [ 2010.779278] __kmalloc+0x25b/0x440 [ 2010.779660] ext4_ext_precache.part.0+0x93/0x580 [ 2010.780157] ? lock_is_held_type+0xd7/0x130 [ 2010.780624] ext4_get_es_cache+0x2e4/0x670 [ 2010.781073] ? lock_release+0x3b2/0x750 [ 2010.781493] ? __might_fault+0xd1/0x170 [ 2010.781912] ? ext4_fiemap+0x270/0x270 [ 2010.782346] __ext4_ioctl+0x1046/0x4e40 [ 2010.782767] ? lock_is_held_type+0xd7/0x130 [ 2010.783247] ? ext4_reset_inode_seed+0x440/0x440 [ 2010.783744] ? lock_is_held_type+0xd7/0x130 [ 2010.784200] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 2010.784748] ? do_vfs_ioctl+0x132/0x1610 [ 2010.785185] ? vfs_fileattr_set+0xb80/0xb80 [ 2010.785643] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 2010.786260] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 2010.786865] ? selinux_inode_getsecctx+0x90/0x90 [ 2010.787378] ? lock_is_held_type+0xd7/0x130 [ 2010.787847] ? selinux_file_ioctl+0xb1/0x260 [ 2010.788311] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2010.788893] ? ext4_fileattr_set+0x18a0/0x18a0 [ 2010.789381] __x64_sys_ioctl+0x196/0x210 [ 2010.789814] do_syscall_64+0x3b/0x90 [ 2010.790208] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2010.790754] RIP: 0033:0x7ff5e66fab19 [ 2010.791142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.793055] RSP: 002b:00007ff5e3c4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2010.793868] RAX: ffffffffffffffda RBX: 00007ff5e680e020 RCX: 00007ff5e66fab19 [ 2010.794617] RDX: 0000000020000140 RSI: 00000000c020662a RDI: 0000000000000005 [ 2010.795380] RBP: 00007ff5e3c4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2010.796117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2010.796856] R13: 00007ffeff1d755f R14: 00007ff5e3c4f300 R15: 0000000000022000 [ 2010.797609] 00:35:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2010.936371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:35:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2011.006452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8902, &(0x7f0000000000)) 00:35:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\f', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000e", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:35:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x500, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:35:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4}) (fail_nth: 4) 00:35:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) r2 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="38d2f298d30bd8ed638054b7641458284949a7ae3dfef507eb46cd9bdd7f28a660e9468af99dcb384b9d953a8e15f4bbf7fdd8e25bc1b6d1e1472227dd67129e79acd6712d0f1d4523068a77", 0x4c, 0xfffffffffffffe00}, {&(0x7f0000000100)="b8cc10de6ba8a69041c6be5a72ef879f97c536dcd48c80aec5dab56844ff6a919d9a2491b843351e359a6a88a122de5ebbf7962eb7201f1355e31f9611dfd5bdaa182ed2f74bd8dce7fdd2e18157ea4e1ab0e245ce50fa39778d56d674f48712662e7d982edc352a9f1d677c5eaab8b9912b4e1a1436a8836d43cbe4130acdd49985873f3adf64c5e8cc3319bc63a057dc8226beee12858a39b9195bde", 0x9d, 0x8}, {&(0x7f0000000200)="c57cc5c6118aa8e7634428692e842bfc2c45ce5504f1b757f61bf56bfc06375199700f2313e30278fd2a1c6bc1afa2825ce2d1e70e0258c29c7bd2da38c6fa8e04c54f842d200a40b98840ae26c0c7569981d31fcaf19e6b807553734d5bf45bd3d7497886652810f25b08f347a8c6b754ac85cbacb3a9291e63276b11def37b79aaab22e85d68b55abf9164feaa121b1b8988c4a62109204660db6afdf4415879", 0xa1, 0x9}], 0x800000, &(0x7f0000000340)={[{'\xaa\xaa\xaa\xaa\xaa'}, {'\xff\xff\xff\xff\xff\xff'}, {'\xff\xff\xff\xff\xff\xff'}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[r0, r1, r2, r3, r0], 0x5) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) [ 2027.585880] loop1: detected capacity change from 0 to 16382 [ 2027.597855] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 2027.616516] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2027.629052] loop1: detected capacity change from 0 to 16382 [ 2027.634892] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 00:35:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x600, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:35:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2027.677880] FAULT_INJECTION: forcing a failure. [ 2027.677880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2027.679173] CPU: 1 PID: 17172 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220407 #1 [ 2027.680075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2027.681319] Call Trace: [ 2027.681627] [ 2027.681885] dump_stack_lvl+0x8b/0xb3 [ 2027.682298] should_fail.cold+0x5/0xa [ 2027.682701] _copy_to_user+0x2a/0x140 [ 2027.683119] __ext4_ioctl+0x1069/0x4e40 [ 2027.683549] ? lock_is_held_type+0xd7/0x130 [ 2027.684026] ? ext4_reset_inode_seed+0x440/0x440 [ 2027.684529] ? lock_is_held_type+0xd7/0x130 [ 2027.684995] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 2027.685563] ? do_vfs_ioctl+0x132/0x1610 [ 2027.685997] ? vfs_fileattr_set+0xb80/0xb80 [ 2027.686456] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 2027.687060] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 2027.687695] ? selinux_inode_getsecctx+0x90/0x90 [ 2027.688213] ? lock_is_held_type+0xd7/0x130 [ 2027.688682] ? selinux_file_ioctl+0xb1/0x260 [ 2027.689150] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2027.689733] ? ext4_fileattr_set+0x18a0/0x18a0 [ 2027.690215] __x64_sys_ioctl+0x196/0x210 [ 2027.690656] do_syscall_64+0x3b/0x90 [ 2027.691060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2027.691657] RIP: 0033:0x7ff5e66fab19 [ 2027.692086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2027.694035] RSP: 002b:00007ff5e3c4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2027.694832] RAX: ffffffffffffffda RBX: 00007ff5e680e020 RCX: 00007ff5e66fab19 [ 2027.695605] RDX: 0000000020000140 RSI: 00000000c020662a RDI: 0000000000000005 [ 2027.696366] RBP: 00007ff5e3c4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2027.697204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2027.697990] R13: 00007ffeff1d755f R14: 00007ff5e3c4f300 R15: 0000000000022000 [ 2027.698760] [ 2027.704363] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8903, &(0x7f0000000000)) 00:35:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x700, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:35:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x220, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$bt_sco(r3, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2f, 0x4, 0x20, 0x80000000, 0x3d, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x10, 0x7, 0x9, 0x17}}) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) [ 2027.769964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2027.778085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2027.804969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:38 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8904, &(0x7f0000000000)) 00:35:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, &(0x7f0000000080)) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x3d) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:35:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4}) (fail_nth: 5) 00:35:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:35:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe00, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 2041.771197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2041.788246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1802, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:35:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x5) listen(r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) [ 2041.854962] FAULT_INJECTION: forcing a failure. [ 2041.854962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2041.856800] CPU: 1 PID: 17236 Comm: syz-executor.0 Not tainted 5.18.0-rc1-next-20220407 #1 [ 2041.859337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2041.862965] Call Trace: [ 2041.863814] [ 2041.864513] dump_stack_lvl+0x8b/0xb3 [ 2041.865726] should_fail.cold+0x5/0xa [ 2041.866937] _copy_to_user+0x2a/0x140 [ 2041.868067] simple_read_from_buffer+0xcc/0x160 [ 2041.869535] proc_fail_nth_read+0x194/0x220 [ 2041.870859] ? proc_exe_link+0x1d0/0x1d0 [ 2041.872181] ? security_file_permission+0xb1/0xd0 [ 2041.873681] ? proc_exe_link+0x1d0/0x1d0 [ 2041.874932] vfs_read+0x1ea/0x5d0 [ 2041.876078] ksys_read+0x127/0x250 [ 2041.877201] ? __ia32_sys_pwrite64+0x220/0x220 [ 2041.878661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2041.880343] do_syscall_64+0x3b/0x90 [ 2041.881500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2041.883167] RIP: 0033:0x7ff5e66ad69c [ 2041.884370] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2041.890398] RSP: 002b:00007ff5e3c4f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2041.892862] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007ff5e66ad69c [ 2041.895201] RDX: 000000000000000f RSI: 00007ff5e3c4f1e0 RDI: 0000000000000006 [ 2041.897396] RBP: 00007ff5e3c4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2041.899614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2041.901879] R13: 00007ffeff1d755f R14: 00007ff5e3c4f300 R15: 0000000000022000 [ 2041.904188] [ 2041.967255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:38 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8906, &(0x7f0000000000)) 00:35:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2041.987282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:35:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:35:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2042.220725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2044.865051] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2044.872634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2044.876402] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2044.895976] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2044.905245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2044.910058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2046.958741] Bluetooth: hci4: command 0x0409 tx timeout [ 2049.007994] Bluetooth: hci4: command 0x041b tx timeout [ 2051.055130] Bluetooth: hci4: command 0x040f tx timeout [ 2053.104040] Bluetooth: hci4: command 0x0419 tx timeout [ 2054.576986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2054.578203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2054.580330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2054.630520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2054.631681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2054.633678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2055.600793] Bluetooth: hci7: command 0x0406 tx timeout 00:36:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8907, &(0x7f0000000000)) 00:36:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4002, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:36:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x800) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xec, 0xfc, 0x1, 0xfff}, {0x101, 0x0, 0x90, 0xee95}]}, 0x10) 00:36:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:36:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00e0ff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:07 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 2070.507225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2070.508835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:36:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:36:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8912, &(0x7f0000000000)) 00:36:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:36:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:07 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:36:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x80fe, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:36:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8940, &(0x7f0000000000)) 00:36:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'ipvlan1\x00', 0x7f}) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) connect$bt_sco(r3, &(0x7f0000000040), 0x8) write$binfmt_elf32(r0, &(0x7f0000001640)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0xbf, 0x0, 0x2, 0x4, 0x2, 0x3, 0x2, 0x18d, 0x38, 0x201, 0x6, 0x1, 0x20, 0x1, 0x8, 0x2, 0x1}, [{0x6, 0x6, 0x4, 0x6, 0xffffffe1, 0x6, 0x9f, 0x7fffffff}], "8df5318aac270010bd1f110183e45b646d15cadd2755d6fea343ed8545119e55d75109ddce12f5173d3c4a0eefd4edf8e6be2ebe89f0902c2c153622adf98b9c627eeccc2af8ebadb76967bdcf3977668460a0734972b91f5b5dfe855a65f44327951379f4ebbb1c39531b1bd429e9b5010dfe8b30d81b121c0e397c10ca8bdd1dc8eb54fcd1aed514047290a45580642a639a9e95ef0e0a198aae38a70ba2333c712602664bf7669d005dba92a4fcf47bf70f66514f3d49c0405602406230e7aec007fab057c7776ac186cbcbfe41e75dba12d927521eef769023292136fdf6f33009ef90acfd11ed9dfcdf05b80d47614e1f5d7e983de9b0c8eb5d5333a65a6bfd6aad678f0009e6e2ff49a209691de913261bfb664cc517227320806eea30e91dd1be84b41d2e88366cf8c874b453a2fff725144a39b400154cff3b2ffcd01f88df1c73cf0d7de08937e82fb96326a43de74469c335e0582c883db4f9969966199828c027ef2320074f5f3d1257c2e6685f8c8a1173b195d9517b219f7447ae3318a0e1fe609742bd026899549e7cc0587c2b173f6f959573c55cc8583d6db03bb6e646f4006e78f103db969cb2d7aa273ce853625ba28ef5643f95bf4e1fb180c924a9b84d9db6ede7f759eb6f6a540a14228be8a06b5adb40245269c65b587ad1ca40be8049f886010964356ffdbe7790af8642e03f64950cd41525cae0d9390e0d3774057b9e99985c3a7973071e7a8d9b8ab101f77624941d1a008023b54af02bdeb33b0b974ee9fb860c70edc14775dc8dc984bfcd2232816ab5df978c95441ed77b8e01a2dcefbc13ed4fee02cb5f7d66742a9e067ca2acef9d95f01bd5c8936b6ad3f300692e0c22105d04ae31f6c07e972593670e8d9471dc682e14ef462d9e7f29b1eedfe840500e985b05ddf1a191722a8dac78e0af6124f100faad24a72303ec26fffc3095963fbec1ce50afff5900135bcb77775d408be0da6cbda030d40f7f95f6aa1138697e74502cb00bfafdc4cb6aacef69f7c1e4c98c323f5f11f339bdb470cd6be57ad3cdf1bff21966b94fc899d3a7bfa8140668ab6fe479f6fb7ea97d3fc1509e79111945d8e89f605c75bdc6bbf49cd8be6a6121c726743df252296cb9fdef601b5ce8dedec823187efda3b29bbb770b328303641ecb3606898bdb715dc901373978fd41e6acf3c2b615643fca8d3943efba48baec6d78c70c677e118105c544b659bb7e0342f1c3fab82fea15738aaf7b0c40462280f07b749bc6adc9d3065509252f0a2d0b155b77d73329c63bdf23704ddfb8e3e4fa65719eef0b17e4600f69c54a953ee1f18e6a59e34553873ae58e2dd925da67796f27482334631ad6b470974dc643cc4a2a4248c1156e482632d8dec523834450edf85e5c0d27ae58024c5f608ae4af6b765063cf5328352a343db7417d2c75d8605ab9bd418bd6825645c7dd13d3abcdcd5956213773a301e55dc730cac5a20d4918aa1374b3a2ebf6c32dd4b52cdc48002592be8447f92242c9e2b84058af9364d6fe469c389dc4db40a281c2dcae7bbd4969ca3f07699e175d0359d67af4ba2b36bc9003d862e973bc63c16735790803780e5ff5351523e045377c70c8f46dd07736c4c639fe6f10bcecfa018e985c7e45f95b93cffc55710ae9bcbca07129edd606d8d506b6f7f311bf3ce183426261d99b3cf687b99050adfeb5666b06755df83e4ce4af82945df5eb318857d128f7074cdc8b42f1af4790d8c561b68af9e8aa6bf9b0f5568876417039ca0175e6e25f22eb0985075eba263e605b3709568e793d89ce5058cac074fc780fcedc7531606e1589b80234c3e125a14ad173dca1ddd8eb17e284dc6b63d2175c7bd09c0b0de315bf641c9aacdb8cba07f58bee3b3ae3462e51b3de9c1597d3773371164cb39f981943f845d9e2a94df0a656a4763cf2e60a0158081728764831bf195417a0f4824cf7743aa7dd1e85898daab7fa55a27a18f225753f3c2d155a39ec0cebcd1ae85f82b009a193bf5018cdc49fe609206bb85dd1348ee9072aa3699434e0023b45a2633ffae7ad5979284ffc0a6fc857acbdfc4cfd47a9687db9a85dca7015272961573931106a35325408474d9c93cdfaa65f4846b96cc0e3f36dcce571bfde95c0ebd47af9c420281caffbda57804e2e02ede517c77f71d39e3d2997c1e75d82dd568a3e59ed4d215276484c9c7a84a279a48fb7a45b2fece4161b9e1ee99eed5a5f08b7b44928f59aa1cbbd94696af13c6ebd1ee70c3c179fb661023f9e09376e647ce81c53561500ed0cd1700670e023f0c64e8ba0bfbc209c7423fecd5d2a5aad033d66de58410dd3cd626dc1b46935efe36afdd5b2d4b165d5aadd8d1326c21214673f21f56e6d0acc51e2e914b621fd478c4a4315812cc74882e84fd35f7322fbe8919143dea49824bf6a9c933e1e054cb3b64a6fc1afa257ff837d274ce1d31f2c427e25d946ae162d41a7d9ee6260c749edfc6436c0ec65c69296ee61caa2b4ba50a2297c846597b9bc7898b49b76e3c78cb80102ac5f115cb4f2bd44b5bc7e35c5c635d83fa5b28690003441325feae833441fd678249e4053e9570fe46a53d7477d2191a36e10034989e34ee3b1e87ef82583f3f61088ad1db754737644cd7745256c974ea80def7c7c28d787c72f3c5c18cc66e3dc633e32de1cf99926248930b0420a8d94781500d6b8750cde8a6ea138f6b5bcde70d87051d773cd518a90468a8fb9c93d5311e4c0d4417876f0b17dd6f46da1df20190482812efa1a43206ef3910628826cbebeda35dd61cb2a121108d9749ebeed3b605f1fdf36933ff491d5cff84e5959525425f8403f07495e697093801233ba01fb5b903970136a68ddad4c7d03858c4bcfb201a6be9bd642a458cccce6189977bbf7be3b17db70ca75e6322a51a86981250b9f7b4001b9c5de2e44ef809c6f239bb72996996b90fb52687774dfc0713bd321e3fd6e2db10c44076014fe6f5482c3271fa33ab72ce143194e9fa2f2eadf2e6be557605c5c95f7b7f90bd47740cfd7d9ff052d1205882aaa3a1fdd2c28ffb9b681969e29ddc9e55f9d2721a83396ff9fc413d414963fb7ca2e9156889c0541da4213e28a70719c82a12e702a3f92b0edf842a6f45e0d05d3ebf55aadb091207562a51ec068cec12eafb2a29ca66a8c1b058f8b640990f16949e7486b205afd14c854ce19fe3dc944a9815d240336df674bbb52536e88805fde008bdf849deb1012b136b79fb4acf22f79444c07749ba31275c9b98468d3e73671640ad704144e36dc40638e2715e4a7e1cca9a7ecff4d58814e602efc4304078a9d97cab0ca75a58bf660b57ef7b69f3760458603d2c182ad9f22e702af6e84e479952810fa5cdcba1a1d7fb89a451cfaffb44f9ed2ebb09b13df91215c2d8f38b087fdd0cf0b1b316518fa39cd4a80b2437b6c7ce910c56501f100254606f0409531ac7d20e2eea7c4bd938e643bbd25a1df36b9bc964db858af02b6960919f0d77d1abb0fd8c5800ad531ba25d13acfd1beebe36f3c6ffccc434a987f03393d471bb2a7414591116e16d2aac9e71f06c5b84490acd48896a658aa44c858fd72beb135e7f7b3a9c4314305ec5f75cc7fe0abf8891f6d3e0ccb79d80ea83ef857fcb10bc54fd0817340f4cb9570ac5cd42f51453863342e6c70805820fde5ddf53a25fbfb12f78d978898be986cd7851abd5899c60c5aaf169e61c9922c4434a3bded9056b5d468404976648c5a7b3a6afc120de408b998f3958be8f49ecc6f6ea2693674aa7267f19dcda47050a01c10d51fab9988f8a2b59cf6134ca244be5f73b5b73f9dcc0d3493b2fe442ca71aeeafeab36fa53f86285ff19fd7a8b3da60178cbf6424a2eeae14b545f96d8f14ee67174cf2950edef292105e5c645ff017fcfabea599f0d30d25aa0c2ff81c2b5ae67bb2b1470558652504558a74f779768e61bd866beee86a2016ca46c66a876e9dfe43e5d5eff64fb88f500ac04b6a272d913c18fe82135ccd34489a3c58f19bf4a31b97e154600cd74984bdffba94a4404fac434c2c88fd866ebd2164a6673a193e5cdb635eb3e0ebf7203ef84bd710f942f584d61f0ce6ce3e1676855bbd79f0c4612bf9c84931facede387391ed9f74d41622333e96d85724b3fed946ae3b17495635c103f3b651cbcae875572bbaa7a0d0760f2d83991551740a03417c1fa4fab88a001f7aad567ab4aeb2b08c9484d8faaecc81faa146dea9391cc4adda15662b9250d53d028da6d7a127fcc8c57665e71cfeb040440a8d4a2ba6e51234936876a7b55f56d4ff25cf5336e85cc18b92f8d29435ad1d23b993bac5321c1a55c51b7a1cb8a7411a23cc6050e05a5eebb8b953be9a6f0125ea4a75dcfa1a3ce51974ac556e7ee09f18cdc79d759539b6a64b5cdc7265cf23aaf44ea41ec0595c84e05817d4c22e5630b2857a621925ec4f26538e0d22e423f1e37fb3c4cab8bcf1cb14f2142cd860a64dbfb57eb3ba2afb8ab0fc7a3b8925c6644fe5cf661cf1ba0c7a5661ab0659af45b0e4b63be9611345682d4f9b7b4e0f6436bffa72e9124067ddd1be4422fadfe4a14e38e5390c35506e5e6960c324bb060e2aed1b89a791bc02676475902d2fd348068b3250444bdad604b7c6dacf32172741430c9de521ff6f14a065dc3a1edaec70644485e94aa81473c293e986fe6afcfb50d70bab3f029d121b5e0c0ec2903b6da09334a614293f1c0a67bcf65f1d39ef65cec27638aa4f619d8d02128446aed5cc111736a3be0d9d287ba48aac47c5e3c9d07cb46858926235d88bd4783469451d944fbb1a0a4c47ff3fe345207779ef02d0b6243035fb43855ddb7474fba3ca1eecf849f80aca970671f90da8408a17a619a85d46936c055d8713d3aa8363097974a66c9efd59a6de5f327416d1a9564bf15527bdeea9c7e02f87736e4e5c82970a6b2b07c53dfcdea41261115669fc0cb1d5fe6d614936a79a5b9103f37aa0178d8f5dbdb3f041fd3dccb4e12eac8eb4c64a9a9a809cd9f76e17a69a1a8c7e6cfdb33eb5980e9d98397b2eaf28de2dec83e980a1d5a934ed70e9643aac1dac87e55be3a5edce1e0cbda5eab8fbac001b7ba89ad2a67a155a0df463cd014435b72b45275d54a9ffa1e198905cafec93e701a47fad4a746cf4fc7bca59ff7dae3f8a5b0ead3bedc80f53fb446733fa9c6238ea14d6942705ee405a061280c8594960bc6fdd83f396b38682c5bee9d79ee55ad212bda55f3815e61112da6fde00addfd04ea8a370df6b2caabdc8f92882c9d3d12b4df7152d680db563279b4b0c7071dda54d107cb6e9c4527857ee02214c4fc65df71cb85228b604b9aed00be7b0c6dcd0891e5ec47231c021f652d94a06337f4a6a370951ec03967cfa911262ca9d285de003aeeb7573bc270bd0da86f0550ff4a59269cde2bb345b1350771713268f1fd010331295b094a56b49d60bc7108ceca0a85432949cead5bd000137336cbff475a8ab32db35dc277af442884255106726cd6949657e1bb66b481f50d86deaef27c2be37ffdd83793455face854b359b104a4e08261b61bed4a3a19b2f97dffe3d16b1326cab37b9244b702d280bd6f51a2de59124b698060c6cbfa4affc9176d0cb4288b3b970bd5aa052a7d0299439a73b05a5b7f60023f2313e4617188feb36993e156d4b52d5daa08b4ddc26950dda49540213c539c674fbb9200e4598bf67c1b3bec422c4adfa38e8b10158242363f524bb4c85046ba55a5b52beada01d", ['\x00', '\x00', '\x00', '\x00']}, 0x1458) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:36:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c7fffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:23 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8941, &(0x7f0000000000)) 00:36:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:36:23 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:36:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xc0fe, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:36:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) fsetxattr(r3, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)='\xff\xff\xff\xff\xff\xff', 0x6, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:36:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:36:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe803, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:36:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) bind$bt_sco(r1, &(0x7f0000001600), 0x8) listen(r0, 0x0) accept4(r1, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80, 0x800) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 00:36:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c9effff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00e0ff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:36:23 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x894c, &(0x7f0000000000)) [ 2088.622819] Bluetooth: hci4: command 0x0405 tx timeout 00:36:39 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88000, 0x19) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @none}, 0x8) 00:36:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x4b47, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:36:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00e0ff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cf0ffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:39 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8982, &(0x7f0000000000)) 00:36:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:36:39 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xf401, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:36:39 executing program 7: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:36:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c7fffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:39 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x501002, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:36:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cfcffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:39 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfc00, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:36:39 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x8983, &(0x7f0000000000)) 00:36:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c7fffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x89a0, &(0x7f0000000000)) 00:36:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x4b49, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:36:54 executing program 7: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:36:54 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfe80, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:36:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c9effff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000080)=""/134, 0x86}, {&(0x7f0000000140)=""/96, 0x60}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000240)=""/255, 0xff}, {&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f00000004c0)=""/242, 0xf2}, {&(0x7f00000005c0)=""/164, 0xa4}], 0x8) bind$bt_sco(r0, &(0x7f0000000040), 0x8) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r2, 0x89eb, &(0x7f0000001700)="345b38759acc264a9e7184f1c50e45371fb697ffdf2066dbbe97a10eab92e117a654e1d42d65b1afc83289a307b24e9c21d49ae68dc9ed3798a21a1370a95e1e29934037266a7de15d6a0b07bd148d6f17a15cbddee345ad10bd27339b") r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001a80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="b0a74538fc8a56784ca173f3a8a699e6214178bc02e3ae901c41e5cc27f546ecee4e3d0276cb22e27ed79e42114f84fae31742495d5c5d0676cc771a585ecb39c66a0377a9b2bc59ef5bc69da58d2c3720dc37673688771bfbe0af7d6fa1afca00c5e2af6e93d14a31db08e0c8fd44ead7bc06e3ccff221ceb12a578817546076000e4b74c9db9ea1e4e3cc7a81f29b6aacd38b399bcd4fda8a224c8609e5b24a61c1f61c4f76e"], 0x20}}, 0x0) bind$packet(r3, &(0x7f0000001780)={0x11, 0x3, r7, 0x1, 0x4, 0x6, @broadcast}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x1a, r7, 0x1, 0x40, 0x6, @link_local}, 0x14) getsockopt$packet_int(r3, 0x107, 0x6, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000700)={{r3}, "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"}) [ 2117.773880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:36:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c9effff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:54 executing program 7: syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:36:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x89a1, &(0x7f0000000000)) 00:36:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cf0ffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:36:54 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:36:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cfcffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2118.153079] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:36:54 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x40049409, &(0x7f0000000000)) [ 2118.615251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=17963 comm=syz-executor.1 [ 2120.067027] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2120.075039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2120.076367] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2120.080263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2120.082935] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2120.084556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2120.450319] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2120.451922] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2120.453357] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2120.455955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2120.457395] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2120.459343] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2122.158768] Bluetooth: hci4: command 0x0409 tx timeout [ 2122.478725] Bluetooth: hci6: command 0x0409 tx timeout [ 2124.206838] Bluetooth: hci4: command 0x041b tx timeout [ 2124.526754] Bluetooth: hci6: command 0x041b tx timeout [ 2126.254709] Bluetooth: hci4: command 0x040f tx timeout [ 2126.575714] Bluetooth: hci6: command 0x040f tx timeout [ 2127.950061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2127.951417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2127.954145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2128.004092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2128.005299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2128.007860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2128.232240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2128.233713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2128.236259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2128.269917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2128.271110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2128.273278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2128.306143] Bluetooth: hci4: command 0x0419 tx timeout [ 2128.625255] Bluetooth: hci6: command 0x0419 tx timeout 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cf0ffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfec0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 2143.722232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:37:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x541b, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:37:20 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x40086602, &(0x7f0000000000)) 00:37:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x4, 0xfffffffffffffff9, 0xffffffffffffffff}) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) [ 2143.759506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:37:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xff00, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:37:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cfcffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x40087602, &(0x7f0000000000)) 00:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:20 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 2143.920979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2143.962296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:37:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x401c5820, &(0x7f0000000000)) 00:37:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x5421, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:37:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="fa418237662a3f28270e00000000000055fcca01f49c66cd7e9db66a6837e3e4832ba8cbc25acabd568d47a6224f2c71d73cbe16b94e991d0fafd688037c2b41916a4805e19f16d47d88bdf37ca9f43c0f6272f90ea5befa5a8b3b003c0000513b2b67"]) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4000, @fd_index=0x3, 0x185, &(0x7f0000000ac0)=""/130, 0x82, 0x6b74d6fc1290fc9, 0x0, {0x0, r2}}, 0xa1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@dev, @broadcast}, &(0x7f0000000080)=0xc) syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x14}, 0x0) syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000004c0), &(0x7f00000005c0)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x0, {0x0, r9}}, 0xa3) syz_io_uring_submit(r3, r7, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r9}}, 0xfb) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/67, 0x43}, {&(0x7f00000003c0)=""/226, 0xe2}, {&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000740)=""/8, 0x8}, {&(0x7f0000000780)=""/70, 0x46}, {&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/200, 0xc8}], 0x8}, 0x0) 00:37:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:37:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xff0f, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 2159.510211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 2159.565051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:37:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:37:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x4020940d, &(0x7f0000000000)) 00:37:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:37:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2159.735813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2159.739883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xccb, './file0\x00'}}) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:37:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 2159.812132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:37:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:37:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x5450, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:37:51 executing program 1: sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x601, 0x70bd2c, 0x25dfdbfd, {0x15, 0x1, 0x0, 0x0, 0x8000, 0x4, 0x7, 0x401}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x24000800) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xa7, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x7, 0x3, 0x3c}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020024}, 0x90) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 00:37:51 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x80086601, &(0x7f0000000000)) 00:37:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:37:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2175.259727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2175.279195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:37:51 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x80087601, &(0x7f0000000000)) 00:37:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:37:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 2175.439867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2175.446813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) capset(&(0x7f0000000340)={0x20080522, r2}, &(0x7f0000000380)={0x0, 0x407, 0x1000008, 0xffffff01, 0x8, 0x3}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x17) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="3b06000000000000c910fe80000000004d64be73588145f6831acc31adee2e77000000000000000000bbc2040000000004010304018007100000000002010008f8ffffffffffffff"], 0x38) sendto$unix(r5, &(0x7f0000000200)="1ae839b5387b550e0085539567b6c423aa52a2a609bcd9c9b112694253cf987d8e93b919e0592d5c07161fcb602ab2be94281a1f61ed999ae0265575af7f5080ca10249fa8d85d8a659e803db359726c7633f9b1d93f927de2ade0bfacbde07333c800eda8a08bf401353634e4a314065a1a48ae118631b82cd3154a31f0a56068a8a231c4fc453abecd81fa0a3d67d7738788f2baf124c52e9b680d36b86d052a6c464b9f33388319f71faee7486131d7c8006f1c5fa89892432a78", 0xbc, 0x40841, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000040)={r5, r6, 0x4}) bind$bt_sco(r0, &(0x7f0000001600)={0x1f, @fixed}, 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:37:52 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x80108906, &(0x7f0000000000)) 00:37:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:37:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) [ 2175.654757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2180.206793] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 2182.458388] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2182.470141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2182.471573] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2182.482049] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2182.487097] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2182.489466] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2184.558784] Bluetooth: hci7: command 0x0409 tx timeout [ 2186.610061] Bluetooth: hci7: command 0x041b tx timeout [ 2188.654678] Bluetooth: hci7: command 0x040f tx timeout [ 2190.702685] Bluetooth: hci7: command 0x0419 tx timeout [ 2191.949249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2191.950843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2191.953592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2191.979425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2191.980739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2191.982935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:38:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:38:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x5451, &(0x7f0000000140)={0x0, 0x0, 0x4}) 00:38:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:38:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x400c080) listen(r1, 0x0) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8) 00:38:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:38:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:38:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x80108907, &(0x7f0000000000)) [ 2207.449575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2207.481160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:38:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) clone3(&(0x7f0000000280)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @empty}, 0x1c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:38:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:38:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x801c581f, &(0x7f0000000000)) 00:38:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:38:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2207.619487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2207.651291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2207.651717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:38:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_setup(0x3ca, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x9, 0x4, 0x0, 0x2, [{0x401, 0x5, 0xe1, '\x00', 0x400}, {0x2, 0x5, 0x2, '\x00', 0x86}]}) 00:38:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:38:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) 00:38:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000001000000200000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00?\x00l\t'], 0x2c}}, 0x0) [ 2207.806471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2207.806502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2207.916526] [ 2207.916819] ====================================================== [ 2207.917631] WARNING: possible circular locking dependency detected [ 2207.918464] 5.18.0-rc1-next-20220407 #1 Not tainted [ 2207.919114] ------------------------------------------------------ [ 2207.919998] syz-executor.4/19058 is trying to acquire lock: [ 2207.920763] ffff88800ce7e130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x11c/0x2c0 [ 2207.922017] [ 2207.922017] but task is already holding lock: [ 2207.922796] ffffffff857c8248 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc7/0x230 [ 2207.923912] [ 2207.923912] which lock already depends on the new lock. [ 2207.923912] [ 2207.924925] [ 2207.924925] the existing dependency chain (in reverse order) is: [ 2207.925857] [ 2207.925857] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 2207.926733] __mutex_lock+0x136/0x14c0 [ 2207.927393] hci_remote_features_evt+0x59d/0x990 [ 2207.928278] hci_event_packet+0x779/0xee0 [ 2207.928953] hci_rx_work+0x24c/0xb90 [ 2207.929484] process_one_work+0xa1c/0x16a0 [ 2207.930157] worker_thread+0x637/0x1250 [ 2207.930741] kthread+0x2f2/0x3b0 [ 2207.931256] ret_from_fork+0x22/0x30 [ 2207.931805] [ 2207.931805] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 2207.932550] __mutex_lock+0x136/0x14c0 [ 2207.933130] sco_sock_connect+0x1e0/0xa60 [ 2207.933791] __sys_connect_file+0x151/0x190 [ 2207.934461] __sys_connect+0x161/0x190 [ 2207.935172] __x64_sys_connect+0x6f/0xb0 [ 2207.935798] do_syscall_64+0x3b/0x90 [ 2207.936371] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2207.937113] [ 2207.937113] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 2207.938102] __lock_acquire+0x2c2f/0x6120 [ 2207.938761] lock_acquire+0x1a2/0x530 [ 2207.946636] lock_sock_nested+0x3d/0xf0 [ 2207.947274] sco_conn_del+0x11c/0x2c0 [ 2207.947849] sco_disconn_cfm+0x62/0x80 [ 2207.948424] hci_conn_hash_flush+0x119/0x230 [ 2207.949078] hci_dev_close_sync+0x4dc/0xf20 [ 2207.949715] hci_unregister_dev+0x15b/0x3f0 [ 2207.950395] vhci_release+0x7c/0xf0 [ 2207.950943] __fput+0x272/0x9d0 [ 2207.951444] task_work_run+0xe2/0x1a0 [ 2207.952020] do_exit+0xaf7/0x27e0 [ 2207.952514] do_group_exit+0xd2/0x2f0 [ 2207.953091] __x64_sys_exit_group+0x3a/0x50 [ 2207.953734] do_syscall_64+0x3b/0x90 [ 2207.954330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2207.955095] [ 2207.955095] other info that might help us debug this: [ 2207.955095] [ 2207.956121] Chain exists of: [ 2207.956121] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 2207.956121] [ 2207.957703] Possible unsafe locking scenario: [ 2207.957703] [ 2207.958494] CPU0 CPU1 [ 2207.959100] ---- ---- [ 2207.959704] lock(hci_cb_list_lock); [ 2207.960206] lock(&hdev->lock); [ 2207.960976] lock(hci_cb_list_lock); [ 2207.961851] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 2207.962577] [ 2207.962577] *** DEADLOCK *** [ 2207.962577] [ 2207.963391] 3 locks held by syz-executor.4/19058: [ 2207.964026] #0: ffff888041565048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x153/0x3f0 [ 2207.965250] #1: ffff888041564078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x241/0xf20 [ 2207.966439] #2: ffffffff857c8248 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc7/0x230 [ 2207.967661] [ 2207.967661] stack backtrace: [ 2207.968237] CPU: 0 PID: 19058 Comm: syz-executor.4 Not tainted 5.18.0-rc1-next-20220407 #1 [ 2207.969328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2207.970820] Call Trace: [ 2207.971150] [ 2207.971456] dump_stack_lvl+0x8b/0xb3 [ 2207.971977] check_noncircular+0x25f/0x2e0 [ 2207.972543] ? print_circular_bug+0x450/0x450 [ 2207.973144] ? __lock_acquire+0x164e/0x6120 [ 2207.973731] __lock_acquire+0x2c2f/0x6120 [ 2207.974279] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2207.975003] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2207.975700] ? lock_acquire+0x1b2/0x530 [ 2207.976242] lock_acquire+0x1a2/0x530 [ 2207.976762] ? sco_conn_del+0x11c/0x2c0 [ 2207.977299] ? lock_release+0x750/0x750 [ 2207.977837] ? lock_release+0x3b2/0x750 [ 2207.978407] ? sco_conn_del+0x112/0x2c0 [ 2207.978939] ? lock_downgrade+0x6d0/0x6d0 [ 2207.979496] ? do_raw_spin_lock+0x121/0x260 [ 2207.980121] ? rwlock_bug.part.0+0x90/0x90 [ 2207.980703] ? hci_dev_close_sync+0x241/0xf20 [ 2207.981314] lock_sock_nested+0x3d/0xf0 [ 2207.981854] ? sco_conn_del+0x11c/0x2c0 [ 2207.982405] sco_conn_del+0x11c/0x2c0 [ 2207.982912] ? sco_conn_del+0x2c0/0x2c0 [ 2207.983441] sco_disconn_cfm+0x62/0x80 [ 2207.983960] hci_conn_hash_flush+0x119/0x230 [ 2207.984551] hci_dev_close_sync+0x4dc/0xf20 [ 2207.985125] ? hci_dev_open_sync+0x20a0/0x20a0 [ 2207.985735] ? up_write+0x148/0x460 [ 2207.986227] hci_unregister_dev+0x15b/0x3f0 [ 2207.986838] vhci_release+0x7c/0xf0 [ 2207.987328] __fput+0x272/0x9d0 [ 2207.987770] ? vhci_close_dev+0x50/0x50 [ 2207.988303] task_work_run+0xe2/0x1a0 [ 2207.988813] do_exit+0xaf7/0x27e0 [ 2207.989287] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2207.990025] ? vfs_write+0x422/0xac0 [ 2207.990505] ? mm_update_next_owner+0x7d0/0x7d0 [ 2207.991131] do_group_exit+0xd2/0x2f0 [ 2207.991644] __x64_sys_exit_group+0x3a/0x50 [ 2207.992944] do_syscall_64+0x3b/0x90 [ 2207.994112] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2207.995813] RIP: 0033:0x7f53877a9b19 [ 2207.997038] Code: Unable to access opcode bytes at RIP 0x7f53877a9aef. [ 2207.999138] RSP: 002b:00007ffd66d514c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2208.001531] RAX: ffffffffffffffda RBX: 00007ffd66d51670 RCX: 00007f53877a9b19 [ 2208.004054] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000043 [ 2208.006628] RBP: 0000000000000000 R08: 0000000000000025 R09: 00007ffd66d51670 [ 2208.009242] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5387803f3e [ 2208.011843] R13: 000000000000001c R14: 0000000000000004 R15: 00007ffd66d516b0 [ 2208.014510] [ 2210.367697] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2210.374947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2210.379015] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2210.395820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2210.397296] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2210.399580] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2212.462775] Bluetooth: hci6: command 0x0409 tx timeout [ 2214.514584] Bluetooth: hci6: command 0x041b tx timeout [ 2216.558844] Bluetooth: hci6: command 0x040f tx timeout [ 2216.918883] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 2216.937330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2216.938576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2216.939739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2216.942386] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 2216.981844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2216.983069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2216.984152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2217.119299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. VM DIAGNOSIS: 00:38:24 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823f0e21 RDI=ffffffff873c7500 RBP=ffffffff873c74c0 RSP=ffff888042f3f3a0 R8 =0000000000000000 R9 =0000000000000032 R10=ffffffff823f29e3 R11=000000000000000a R12=0000000000000032 R13=0000000000000032 R14=ffffffff873c74c0 R15=dffffc0000000000 RIP=ffffffff823f0e78 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe641f156c8 CR3=000000001ce5a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=dffffc0000000000 RCX=0000000080000000 RDX=0000000000000001 RSI=ffffffff81516234 RDI=ffffc900000a9069 RBP=ffff88800ff7fd20 RSP=ffff88800ff7fc50 R8 =000000007fff0000 R9 =0000000000000100 R10=ffffffff81454bf9 R11=0000000000000000 R12=00000000c000003e R13=ffff88800ff7fd58 R14=ffff88800ff7fd30 R15=ffffc900000a9070 RIP=ffffffff814421ad RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5f9809f8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffeff1d5f68 CR3=000000000ef18000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM01=0000000000000000 0000000000000000 6c622f6c61757472 69762f7365636976 YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403 YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 00005560ab8ec8f0 00005560ab90aa90 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000300000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000